Search results

2,9,7 Appl Error 1000 in w3wp.exe Module ucrtbase.dll

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3397 In owasp-modsecurity/ModSecurity;

· FrankWarius opened on Jun 6, 2025

14 comments

Behavior change in regex macro expansion from 2.9.7 to 2.9.8 affecting CRS 3.2.x and 3.3.x

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

Bug

#3380 In owasp-modsecurity/ModSecurity;

· dune73 opened on May 12, 2025

8 comments

Remove possiblity to disable early-blocking processing

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3362 In owasp-modsecurity/ModSecurity;

· arminabf opened on Apr 17, 2025

11 comments

Feature Request (v2): Add support for macro expansion for ipMatch operator

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3332 In owasp-modsecurity/ModSecurity;

· EsadCetiner opened on Jan 21, 2025

6 comments

base64Decode behaviour against payload which contain + and /

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3327 In owasp-modsecurity/ModSecurity;

· touchweb-vincent opened on Jan 10, 2025

13 comments

Transformation hexDecode should not allow badly encoded inputs, or documentation should be updated

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

3.xRelated to ModSecurity version 3.xRelated to ModSecurity version 3.x

Status: Open.

#3325 In owasp-modsecurity/ModSecurity;

· fzipi opened on Jan 9, 2025

3 comments

ModSecurity 2.9.7 install on Windows is blocking access to some local URL

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3323 In owasp-modsecurity/ModSecurity;

· adrianglendinningGPI opened on Jan 8, 2025

7 comments

Post-use evaluation feedback

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3320 In owasp-modsecurity/ModSecurity;

· zhouhao425 opened on Jan 6, 2025

2 comments

I'm having trouble importing the modsecurity module into nginx.

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3317 In owasp-modsecurity/ModSecurity;

· MuhammetAliKara opened on Dec 23, 2024

7 comments

Drop YAJL dependency

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

3.xRelated to ModSecurity version 3.xRelated to ModSecurity version 3.x

Status: Open.

#3308 In owasp-modsecurity/ModSecurity;

· mikelolasagasti opened on Nov 26, 2024

21 comments

Segmentation fault in ModSecurity 2.9 for Apache

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3300 In owasp-modsecurity/ModSecurity;

· vizovitin opened on Nov 13, 2024

49 comments



Operator @rx has different flags in two engines

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3295 In owasp-modsecurity/ModSecurity;

· airween opened on Nov 7, 2024

2 comments



Unicode encoding (table) problem on engine level leading to CRS false positives (U+062F and U+D8AF resolving to slash)

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

3.xRelated to ModSecurity version 3.xRelated to ModSecurity version 3.x

Status: Open.

#3294 In owasp-modsecurity/ModSecurity;

· dune73 opened on Nov 4, 2024

7 comments

using iptables marks or ipsets

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3289 In owasp-modsecurity/ModSecurity;

· f1-outsourcing opened on Oct 29, 2024

1 comment

Inconsistent use of SecArgumentsLimit in Recommended Rules

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

configRelated to default configRelated to default config

Status: Open.

#3261 In owasp-modsecurity/ModSecurity;

· studersi opened on Sep 25, 2024

11 comments

fix: Handle "filename*" field in MP header

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open (in progress).

owasp-modsecurity/ModSecuritynumber 3239

#3239 In owasp-modsecurity/ModSecurity;

· airween opened on Aug 25, 2024

· Changes requested

· 40/41

23



[modsecurity.conf-recommended] align processing on request & response for json

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

configRelated to default configRelated to default config

Status: Open.

#3175 In owasp-modsecurity/ModSecurity;

· fzipi opened on Jun 24, 2024

4 comments

Problem about proxy action

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Platform - Apache

Status: Open.

#3170 In owasp-modsecurity/ModSecurity;

· prince-java opened on Jun 12, 2024

7 comments

Apache: Short Lingering Close

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Platform - Apache

Status: Open.

#3143 In owasp-modsecurity/ModSecurity;

· studersi opened on May 15, 2024

5 comments



@rbl operator does not support IPv6

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

3.xRelated to ModSecurity version 3.xRelated to ModSecurity version 3.x

🥇 good first issue

bugIt is a confirmed bugIt is a confirmed bug

duplicateOps. Somebody else already hit that bumpOps. Somebody else already hit that bump

Status: Open.

#3131 In owasp-modsecurity/ModSecurity;

· airween opened on Apr 24, 2024



Incorrect utf8toUnicode transformation for 00xx

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3129 In owasp-modsecurity/ModSecurity;

· marcstern opened on Apr 23, 2024

3 comments

feat: Allow regular expressions in ctl:ruleRemoveTargetByX variable names II.

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

do not merge

Status: Open (in progress).

owasp-modsecurity/ModSecuritynumber 3121

#3121 In owasp-modsecurity/ModSecurity;

· airween opened on Apr 16, 2024

· Changes requested

40



Feature request: Limit the number of rules processed per request

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3112 In owasp-modsecurity/ModSecurity;

· no-sec-marko opened on Mar 25, 2024

3 comments

SanitiseArg does not work in RequestBody

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

Status: Open.

#3089 In owasp-modsecurity/ModSecurity;

· Seppl2202 opened on Feb 21, 2024

6 comments

No CPE for 3.0.11 and 3.0.12

2.xRelated to ModSecurity version 2.xRelated to ModSecurity version 2.x

3.xRelated to ModSecurity version 3.xRelated to ModSecurity version 3.x

Status: Open.

#3083 In owasp-modsecurity/ModSecurity;

· frankvanbever opened on Feb 14, 2024

4 comments