Search results

Rule Request: Vite.js /@fs/ Path Traversal (CVE-2025-30208)

Status: Open.

#4404 In coreruleset/coreruleset;

· disisto opened on Jan 14, 2026

Expand rule targets to include REQUEST_HEADERS

➖ False Negative - Evasion

Status: Open.

#4401 In coreruleset/coreruleset;

· EsadCetiner opened on Jan 12, 2026

Monthly Chat Agenda January 2026 (2026-01-05)

🔖 Meeting Agenda

Status: Open.

#4392 In coreruleset/coreruleset;

· theseion opened on Jan 5, 2026

RCE Bypass via common shell aliases from Bash And Zsh

➖ False Negative - Evasion

Status: Open.

#4390 In coreruleset/coreruleset;

· HackingRepo opened on Dec 24, 2025

RCE bypass via the <code>date</code> command

➖ False Negative - Evasion

Status: Open.

#4388 In coreruleset/coreruleset;

· HackingRepo opened on Dec 22, 2025

Move regexp from rule 921200 to ra file

Status: Open.

#4387 In coreruleset/coreruleset;

· fzipi opened on Dec 21, 2025

SSRF bypass via http:

➖ False Negative - Evasion

Status: Open.

#4384 In coreruleset/coreruleset;

· HackingRepo opened on Dec 19, 2025

AngularJS bypass XSS rules with Modsec 3.0.16 using CRS 4.19.0

➖ False Negative - Evasion

Status: Open.

#4377 In coreruleset/coreruleset;

· ronanlaunayenovacom opened on Dec 8, 2025

Excessive false positives in rules 941100, 942290, 942550 for advertising/tracking cookies

➕ False Positive

Status: Open.

#4370 In coreruleset/coreruleset;

· canerfilibeli opened on Dec 2, 2025

How to improve resistance to comment-based evasions ?

Status: Open.

#4363 In coreruleset/coreruleset;

· touchweb-vincent opened on Nov 25, 2025

False positive 953101 when webpage contains text "file size is"

➕ False Positive

Status: Open.

#4359 In coreruleset/coreruleset;

· NullIsNot0 opened on Nov 24, 2025

Natural language FPs with rule 932250 PL1

➕ False Positive

🙏 help wantedExtra attention is neededExtra attention is needed

Status: Open.

#4356 In coreruleset/coreruleset;

· RedXanadu opened on Nov 23, 2025