corazawaf/coraza

Releases42

Frequency1 month 1 week

Last Release 2 months ago

Stars3.53K

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-40586 ↗	Aug 25, 2023Friday, 25 August 2023, 21:15	7.5 HIGH	—
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`, the application using coraza crashed after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an error in `mime.ParseMediaType`. This issue was patched in version 3.0.1.