Corazawaf

11 CVEs across 1 Corazawaf products. Browse Corazawaf vulnerabilities, severities, and proof-of-concept exploits.

Corazawaf products with known CVEs

ProductCVEs
Coraza11
Corazawaf CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-41510High7.22026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecArgument…
CVE-2026-104774Medium5.82026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDecode transformation in internal/transfo…
CVE-2026-41508Medium5.82026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, the multipart processor in internal/bodyprocessor…
CVE-2026-41504Medium5.82026-10-12OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditl…
CVE-2026-107835Medium4.02026-10-09OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies…
CVE-2026-107834Medium5.32026-10-09OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the multipart loop in internal/bodyprocessors/mul…
CVE-2026-107833Medium5.92026-10-09OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessResponse in internal/bodyprocessors/json.g…
CVE-2026-107826High7.52026-10-09OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, readJSON in internal/bodyprocessors/json.go can s…
CVE-2026-107825Medium4.02026-10-09OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go h…
CVE-2025-29914Medium5.42025-03-20OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.3.3, if a request is made on an URI starting with //, coraza w…
CVE-2023-40586High7.52023-08-25OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`, the application using coraza crashed a…