Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

corazawaf — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting corazawaf. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability data for the vendor corazawaf, focusing on Common Weakness Enumerations (CWE) related to its Web Application Firewall products. It collects records of security flaws identified in corazawaf software releases, covering incidents reported between the years 2020 and 2024. The database includes various severity levels and types of weaknesses that have impacted the stability or security posture of the firewall appliances and related modules during this period. Visitors can utilize this resource to track a vendor's advisories over time, observing how the organization responds to different classes of security issues. By examining these entries, users can understand a specific weakness class within the context of this particular vendor’s implementation, gaining insight into common misconfigurations or coding errors. Additionally, you can look up a product's vulnerability history to assess the long-term reliability of the solution and identify trends in patch management. This structured overview supports security analysts and IT administrators in conducting thorough risk assessments without needing to scour multiple external sources manually. The information is organized to facilitate quick reference and comparative analysis against other industry standards. Understanding these historical patterns helps in making informed decisions about deployment strategies and necessary mitigation controls. This aggregation serves as a centralized reference point for those evaluating the security landscape surrounding corazawaf solutions.

Found 14 results / 14 Clear Filters
Top products by corazawaf: coraza
CVE ID Title CVSS Severity Published
CVE-2026-114100 Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type — coraza CWE-20 5.8 Medium 2026-10-21
CVE-2026-114101 Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass — coraza CWE-20 4.0 Medium 2026-10-21
CVE-2026-114099 Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision — coraza CWE-20 5.8 Medium 2026-10-21
CVE-2026-41508 OWASP Coraza WAF: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling — coraza CWE-693 5.8 Medium 2026-10-12
CVE-2026-41504 OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields — coraza CWE-93 5.8 Medium 2026-10-12
CVE-2026-104774 OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass — coraza CWE-172 5.8 Medium 2026-10-12
CVE-2026-41510 OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding — coraza CWE-693 7.2 High 2026-10-12
CVE-2026-107835 OWASP Coraza WAF: Cookie Parser Confusion — coraza CWE-436 4.0 Medium 2026-10-09
CVE-2026-107834 OWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processor — coraza CWE-400 5.3 Medium 2026-10-09
CVE-2026-107833 OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion — coraza CWE-674 5.9 Medium 2026-10-09
CVE-2026-107826 OWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash) — coraza CWE-674 7.5 High 2026-10-09
CVE-2026-107825 OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations — coraza CWE-20 4.0 Medium 2026-10-09
CVE-2025-29914 OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME` — coraza CWE-706 5.4 Medium 2025-03-20
CVE-2023-40586 go package github.com/corazawaf/coraza is vulnerable to denial of service — coraza CWE-400 7.5 High 2023-08-25

This page lists every published CVE security advisory associated with corazawaf. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.