Skip to content

Issues: owasp-modsecurity/ModSecurity

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

196 Open 2,207 Closed
196 Open 2,207 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Unicode encoding (table) problem on engine level leading to CRS false positives (U+062F and U+D8AF resolving to slash) 2.x Related to ModSecurity version 2.x 3.x Related to ModSecurity version 3.x
#3294 opened Nov 4, 2024 by dune73
Segment error occurs after calling msc_set_log_cb set callback function
#3292 opened Nov 1, 2024 by dkwang2024
How to Add UNIQUE_ID to Response Headers？ 3.x Related to ModSecurity version 3.x
#3290 opened Oct 30, 2024 by meguoe
8
using iptables marks or ipsets 2.x Related to ModSecurity version 2.x
#3289 opened Oct 29, 2024 by f1-outsourcing
1
Custom Response Body Rule Not Blocking for Responses Larger Than 1KB 3.x Related to ModSecurity version 3.x
#3282 opened Oct 18, 2024 by Dr-Lazarus-V2
6
setvar never increments 3.x Related to ModSecurity version 3.x
#3278 opened Oct 15, 2024 by sharmashivanand
1
Building ModSecurity Dynamic Module: Should I use ./configure --with-pcre2 for libmodsecurity and Nginx Connector? 3.x Related to ModSecurity version 3.x
#3277 opened Oct 15, 2024 by Danrancan
3
Building from (Which) Source. Compilation recipe's instructions using outdate (SpiderLabs) URL's. On Purpose? 3.x Related to ModSecurity version 3.x
#3276 opened Oct 15, 2024 by Danrancan
3
About CVE-2024-46292 3.x Related to ModSecurity version 3.x
#3274 opened Oct 12, 2024 by airween
SSL cert entry logs are not present in /var/logs/modsec_auddit.log file. 3.x Related to ModSecurity version 3.x
#3272 opened Oct 9, 2024 by vivekch0976
4
ModSecurity Audit Logs Showing Numeric Severity Instead of String Defined in Rules and Incorrect Severity Mapping 3.x Related to ModSecurity version 3.x
#3271 opened Oct 8, 2024 by rohithmulka
3
Inconsistent use of SecArgumentsLimit in Recommended Rules 2.x Related to ModSecurity version 2.x config Related to default config
#3261 opened Sep 25, 2024 by studersi
10
Escape double quotation mark character in non-regex operator 3.x Related to ModSecurity version 3.x bug It is a confirmed bug
#3252 opened Sep 10, 2024 by capy3ra
5
An error occurred when compiling and installing modsecurity 3.x Related to ModSecurity version 3.x
#3242 opened Aug 27, 2024 by yancong303
4
rx: regex error 'MATCH_LIMIT' for pattern 3.x Related to ModSecurity version 3.x
#3237 opened Aug 23, 2024 by Lathanderjk
2
Review and document multi-threading support and limitations 3.x Related to ModSecurity version 3.x
#3215 opened Aug 7, 2024 by eduar-hte
4
libModSecurity3: all triggered rule IDs sometimes won't be logged with anomaly scoring 3.x Related to ModSecurity version 3.x bug It is a confirmed bug
#3204 opened Aug 2, 2024 by EsadCetiner
@airween
3
Discussion about 'hostname' field in log 3.x Related to ModSecurity version 3.x
#3200 opened Jul 29, 2024 by airween
@airween
9
Detect user agent and execute action help wanted
#3184 opened Jul 17, 2024 by AngelSamuel
3
[BUG] multiMatch lead to unexpected match 3.x Related to ModSecurity version 3.x bug It is a confirmed bug
#3183 opened Jul 15, 2024 by leveryd
1
No error log if noauditlog is set 3.x Related to ModSecurity version 3.x bug It is a confirmed bug
#3180 opened Jul 8, 2024 by Rapsody09
5
Discussion of the new XML processing feature 2.x Related to ModSecurity version 2.x
#3178 opened Jun 28, 2024 by airween
36
[modsecurity.conf-recommended] align processing on request & response for json 2.x Related to ModSecurity version 2.x config Related to default config
#3175 opened Jun 24, 2024 by fzipi
4
Problem about proxy action 2.x Related to ModSecurity version 2.x Platform - Apache
#3170 opened Jun 12, 2024 by prince-java
7
Assistance Required with ModSecurity Rule Compatibility for OpenLiteSpeed 3.x Related to ModSecurity version 3.x help wanted
#3169 opened Jun 9, 2024 by admiral504
4
ProTip! Mix and match filters to narrow down what you’re looking for.