Skip to content

Pull requests: coreruleset/coreruleset

New pull request New
27 Open 1,513 Closed
27 Open 1,513 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore: improves quant output with run details release:ignore Ignore for changelog release
#4318 opened Nov 3, 2025 by M4tteoP Loading…
1
feat: update restricted file extensions
#4316 opened Nov 3, 2025 by touchweb-vincent Loading…
8
fix(942431): updated regex pattern to NOT include non-ascii characters release:ignore Ignore for changelog release
#4307 opened Oct 23, 2025 by azurit Loading…
1
fix(942431): reduce false positive
#4305 opened Oct 22, 2025 by touchweb-vincent Loading…
7
fix(931130): Isolating 2-chars sequence with high risk of false positive on high entropy input ⚠️ do not merge Additional work or discussion is needed despite passing tests
#4304 opened Oct 22, 2025 by touchweb-vincent Loading…
23
feat: add 921500 - Nonstandard urlencode characters in path
#4302 opened Oct 22, 2025 by touchweb-vincent Loading…
3
feat: update restricted files and file extensions release:new-detection In this PR we introduce a new detection
#4299 opened Oct 21, 2025 by EsadCetiner Loading…
1
30
feat: add 920630 to prevent fingerprinting
#4297 opened Oct 20, 2025 by touchweb-vincent Loading…
25
chore(deps): update owasp/modsecurity-crs:nginx docker digest to 62355cb in tests/docker-compose.yml dependencies digest docker release:ignore Ignore for changelog release
#4296 opened Oct 20, 2025 by renovate bot Loading…
1 task
chore(deps): update owasp/modsecurity-crs:apache docker digest to 11a4278 in tests/docker-compose.yml dependencies digest docker release:ignore Ignore for changelog release
#4295 opened Oct 20, 2025 by renovate bot Loading…
1 task
fix(942420): Clarify false positives and exclusions for SQLI rule
#4293 opened Oct 18, 2025 by touchweb-vincent Loading…
4
fix(941120): new regex is eligible for Paranoia Level 1
#4291 opened Oct 16, 2025 by touchweb-vincent Loading…
3
fix(932180): avoid false positives
#4282 opened Oct 7, 2025 by touchweb-vincent Loading…
6
chore: 920190 bypass
#4278 opened Oct 5, 2025 by touchweb-vincent Loading…
7
fix: add separate rule to match unix commands with no arguments release:fix
#4273 opened Sep 28, 2025 by EsadCetiner Loading…
1
1
feat: updated unix shell builtins release:new-detection In this PR we introduce a new detection
#4271 opened Sep 23, 2025 by Xhoenix Loading…
7
fix(934140): update perl interpolation regex release:fix
#4250 opened Aug 31, 2025 by fzipi Loading…
5
fix: remove non-unix commands from unix rce rules (932230 PL-1, 932235 PL-1, 932250 PL-1, 932260 PL-1, 932220 PL-2, 932236 PL-2, 932239 PL-2, 932237 PL-3) release:fix
#4247 opened Aug 22, 2025 by EsadCetiner Loading…
1
3
fix(932190): expand globbing detection release:fix
#4246 opened Aug 22, 2025 by Xhoenix • Draft
1
fix(942360): update sqli payloads release:fix release:refactor
#4238 opened Aug 11, 2025 by Xhoenix Loading…
1
3
fix(942200): False Positive release:fix
#4236 opened Aug 11, 2025 by Xhoenix Loading…
1
12
fix(932205): remove dot star 🧙 regex-assembly release:fix Stale
#4168 opened Jun 20, 2025 by fzipi Loading…
4
fix(942390): move to regex-assembly 📖 documentation Improvements or additions to documentation 🧙 regex-assembly
#4011 opened Feb 24, 2025 by fzipi • Draft
4
chore: add quant as comment
#3925 opened Nov 3, 2024 by fzipi Loading…
10
feat: added detection for quote evasion release:new-detection In this PR we introduce a new detection
#3813 opened Sep 6, 2024 by Xhoenix Loading…
68
ProTip! Follow long discussions with comments:>50.