Search results

RCE bypass via the <code>date</code> command

➖ False Negative - Evasion

Status: Open.

#4388 In coreruleset/coreruleset;

· HackingRepo opened on Dec 22, 2025

Move regexp from rule 921200 to ra file

Status: Open.

#4387 In coreruleset/coreruleset;

· fzipi opened on Dec 21, 2025

SSRF bypass via http:

➖ False Negative - Evasion

Status: Open.

#4384 In coreruleset/coreruleset;

· HackingRepo opened on Dec 19, 2025

AngularJS bypass XSS rules with Modsec 3.0.16 using CRS 4.19.0

➖ False Negative - Evasion

Status: Open.

#4377 In coreruleset/coreruleset;

· ronanlaunayenovacom opened on Dec 8, 2025

Excessive false positives in rules 941100, 942290, 942550 for advertising/tracking cookies

➕ False Positive

Status: Open.

#4370 In coreruleset/coreruleset;

· canerfilibeli opened on Dec 2, 2025

How to improve resistance to comment-based evasions ?

Status: Open.

#4363 In coreruleset/coreruleset;

· touchweb-vincent opened on Nov 25, 2025

Default list of allowed request content types includes non-processed types

🐛 bugSomething isn't workingSomething isn't working

Status: Open.

#4362 In coreruleset/coreruleset;

· RedXanadu opened on Nov 25, 2025

False positive 953101 when webpage contains text "file size is"

➕ False Positive

Status: Open.

#4359 In coreruleset/coreruleset;

· NullIsNot0 opened on Nov 24, 2025

Natural language FPs with rule 932250 PL1

➕ False Positive

🙏 help wantedExtra attention is neededExtra attention is needed

Status: Open.

#4356 In coreruleset/coreruleset;

· RedXanadu opened on Nov 23, 2025

Quantitative testing: Round 2 of testing and squashing natural language false positives

➕ False Positive

🚀 enhancementNew feature or requestNew feature or request

⏲️ In progress

v4Should go into release v4Should go into release v4

Status: Open.

#4354 In coreruleset/coreruleset;

· RedXanadu opened on Nov 23, 2025

FP on 942290 ($in in cookie)

➕ False Positive

Status: Open.

#4349 In coreruleset/coreruleset;

· FlavienSR opened on Nov 20, 2025

False positive 942190 on string containing SELECT

➕ False Positive

Status: Open.

#4342 In coreruleset/coreruleset;

· pete-layerhealth opened on Nov 14, 2025