Skip to content

Issues: SpiderLabs/ModSecurity

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

150 Open 2,012 Closed
150 Open 2,012 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Is it possible to change Loaded PCRE version from 8.44 to 8.8
#2787 opened Aug 19, 2022 by dave-w-wilson
7
NULL pointer 2.x Related to ModSecurity version 2.x
#2782 opened Aug 10, 2022 by marcstern
Sanitize XML (same as #360 and #587) 2.x Related to ModSecurity version 2.x
#2779 opened Aug 3, 2022 by touchweb-vincent
1
Repeated headers cause problems in json audit logs
#2777 opened Jul 26, 2022 by jbohanon
1
configure with --with-lua= / parameter seems to be not used
#2773 opened Jul 15, 2022 by amsnek
1
Configuration directive SecUploadFileLimit is exclusive
#2766 opened Jun 20, 2022 by regazzoj
3
v3.0.7 segfault at liblmdb.so.0.0.0
#2755 opened Jun 2, 2022 by dvershinin
7
rules with multiMatch may omit 'tag' information in audit log output
#2754 opened Jun 1, 2022 by chenjinlei
2
PCRE2 support still requires PCRE1
#2750 opened May 31, 2022 by dvershinin
2
Add PCRE2 support to ModSecurity v2 2.x Related to ModSecurity version 2.x
#2737 opened May 4, 2022 by martinhsv
2
feature request: show action payload in debug log, like ctl:xxxx
#2729 opened Apr 25, 2022 by liudongmiao
1
memory leak in msc_rules_add_file / msc_rules_cleanup
#2710 opened Mar 22, 2022 by liudongmiao
16
Cannot get REQUEST_FILENAME with %3f (encoded ?) in url path
#2705 opened Mar 19, 2022 by liudongmiao
2
feature request: cache transformed value new feature This is a new feature
#2702 opened Mar 16, 2022 by liudongmiao
3
Unable to turn off writing to the server log even set to nolog,noauditlog 3.x Related to ModSecurity version 3.x
#2698 opened Mar 14, 2022 by Taymindis
7
feature request: audit log only if disruptive
#2696 opened Mar 12, 2022 by liudongmiao
5
SecAuditLogParts never logs anything for 'K' type (list of rule IDs)
#2684 opened Feb 18, 2022 by mig5
3
Rules with both chain and multiMatch may produce excess writes to audit log 3.x Related to ModSecurity version 3.x
#2672 opened Jan 14, 2022 by martinhsv
ModSecurity should able to analyse gRPC request body. new feature This is a new feature
#2645 opened Nov 22, 2021 by pandey-adarsh147
4
ValidateSchema::evaluate is not thread safe
#2639 opened Nov 10, 2021 by saiskee
segmentation fault with SecStreamInBodyInspection and chunked encoding 2.x Related to ModSecurity version 2.x
#2628 opened Oct 21, 2021 by marcstern
5
Modsecurity sees the HTTP "INVALID" method instead of "PATCH" 2.x Related to ModSecurity version 2.x Platform - IIS
#2623 opened Sep 26, 2021 by KernelPan1k
3
Broken Examples Between v3.04 and v3.05 + master
#2618 opened Sep 9, 2021 by mthbrown
build broken on Debian bullseye - ../libtool: line 1733: 84059 Aborted (core dumped) ar cr .libs/libmodsecurity.a
#2613 opened Sep 1, 2021 by adrelanos
11
ModSecurity fails to build on Buildroot with MaxMind enabled
#2595 opened Jul 24, 2021 by frankvanbever
ProTip! Type g i on any issue or pull request to go back to the issue listing page.