Skip to content

Issues: owasp-modsecurity/ModSecurity

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

202 Open 2,211 Closed
202 Open 2,211 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Enhancement: increase SecPcreMatchLimit for specific file
#3304 opened Nov 19, 2024 by Orgoth
6
Memory Leak with nginx 1.26 3.x Related to ModSecurity version 3.x
#3303 opened Nov 14, 2024 by nedngo
1
Segmentation fault in ModSecurity 2.9 for Apache 2.x Related to ModSecurity version 2.x
#3300 opened Nov 13, 2024 by vizovitin
@marcstern
11
SecRuleUpdateActionById directive with a range 3.x Related to ModSecurity version 3.x
#3297 opened Nov 12, 2024 by oceanmancuonh
3
feat: Allow multipart/mixed request with special "OData batch" structure
#3296 opened Nov 7, 2024 by HeikoTheissen
3
Operator @rx has different flags in two engines 2.x Related to ModSecurity version 2.x
#3295 opened Nov 7, 2024 by airween
@marcstern
2
Unicode encoding (table) problem on engine level leading to CRS false positives (U+062F and U+D8AF resolving to slash) 2.x Related to ModSecurity version 2.x 3.x Related to ModSecurity version 3.x
#3294 opened Nov 4, 2024 by dune73
7
Segment error occurs after calling msc_set_log_cb set callback function 3.x Related to ModSecurity version 3.x
#3292 opened Nov 1, 2024 by dkwang2024
1
How to Add UNIQUE_ID to Response Headers？ 3.x Related to ModSecurity version 3.x
#3290 opened Oct 30, 2024 by meguoe
12
using iptables marks or ipsets 2.x Related to ModSecurity version 2.x
#3289 opened Oct 29, 2024 by f1-outsourcing
1
Custom Response Body Rule Not Blocking for Responses Larger Than 1KB 3.x Related to ModSecurity version 3.x
#3282 opened Oct 18, 2024 by Dr-Lazarus-V2
6
setvar never increments 3.x Related to ModSecurity version 3.x
#3278 opened Oct 15, 2024 by sharmashivanand
1
Building ModSecurity Dynamic Module: Should I use ./configure --with-pcre2 for libmodsecurity and Nginx Connector? 3.x Related to ModSecurity version 3.x
#3277 opened Oct 15, 2024 by Danrancan
3
Building from (Which) Source. Compilation recipe's instructions using outdate (SpiderLabs) URL's. On Purpose? 3.x Related to ModSecurity version 3.x
#3276 opened Oct 15, 2024 by Danrancan
3
About CVE-2024-46292 3.x Related to ModSecurity version 3.x
#3274 opened Oct 12, 2024 by airween
SSL cert entry logs are not present in /var/logs/modsec_auddit.log file. 3.x Related to ModSecurity version 3.x
#3272 opened Oct 9, 2024 by vivekch0976
4
ModSecurity Audit Logs Showing Numeric Severity Instead of String Defined in Rules and Incorrect Severity Mapping 3.x Related to ModSecurity version 3.x
#3271 opened Oct 8, 2024 by rohithmulka
3
Inconsistent use of SecArgumentsLimit in Recommended Rules 2.x Related to ModSecurity version 2.x config Related to default config
#3261 opened Sep 25, 2024 by studersi
11
Escape double quotation mark character in non-regex operator 3.x Related to ModSecurity version 3.x bug It is a confirmed bug
#3252 opened Sep 10, 2024 by capy3ra
5
An error occurred when compiling and installing modsecurity 3.x Related to ModSecurity version 3.x
#3242 opened Aug 27, 2024 by yancong303
4
rx: regex error 'MATCH_LIMIT' for pattern 3.x Related to ModSecurity version 3.x
#3237 opened Aug 23, 2024 by Lathanderjk
2
Review and document multi-threading support and limitations 3.x Related to ModSecurity version 3.x
#3215 opened Aug 7, 2024 by eduar-hte
4
libModSecurity3: all triggered rule IDs sometimes won't be logged with anomaly scoring 3.x Related to ModSecurity version 3.x bug It is a confirmed bug
#3204 opened Aug 2, 2024 by EsadCetiner
@airween
3
Discussion about 'hostname' field in log 3.x Related to ModSecurity version 3.x
#3200 opened Jul 29, 2024 by airween
@airween
9
Detect user agent and execute action help wanted
#3184 opened Jul 17, 2024 by AngelSamuel
3
ProTip! Adding no:label will show everything without a label.