Search results

Potential HTTP/2 HPACK bomb memory exhaustion in coraza-caddy v2.5.0

Status: Open.

#316 In corazawaf/coraza-caddy;

· hosszugyula opened on Jun 9, 2026

Request is interrupted but audit log shows no

Status: Open.

#315 In corazawaf/coraza-caddy;

· skyflyer opened on Jun 7, 2026

superfluous response.WriteHeader call when SecRuleEngine On

Status: Open.

#307 In corazawaf/coraza-caddy;

· Forza-tng opened on May 16, 2026

response_override for multi-tenant WAF deployments

Status: Open.

#299 In corazawaf/coraza-caddy;

· stardothosting opened on Apr 22, 2026

Memory problems after issuing the reload --force command

Status: Open.

#258 In corazawaf/coraza-caddy;

· hosszugyula opened on Feb 9, 2026

Support for env variables in directives

Status: Open.

#227 In corazawaf/coraza-caddy;

· arthurpers86 opened on Aug 27, 2025

failed to compile the directive "secrule": invalid arguments, expected collection TX

Status: Open.

#222 In corazawaf/coraza-caddy;

· hua5819233 opened on Jul 27, 2025

Bug: SecResponseBodyLimitAction ProcessPartial: Aborting with incomplete response / short write / premature closing of client connection using reverse_proxy when using Transfer-Encoding: chunked / Reporting-only WAF breaks connections

Status: Open.

#219 In corazawaf/coraza-caddy;

· clnative opened on Jun 20, 2025

Unable to load embedded CRS

Status: Open.

#214 In corazawaf/coraza-caddy;

· TheDcoder opened on May 13, 2025

Debug log not written

Status: Open.

#206 In corazawaf/coraza-caddy;

· shoehle opened on Mar 31, 2025

Add tag for all SecRules with SecDefaultAction

Status: Open.

#175 In corazawaf/coraza-caddy;

· glenn0711 opened on Oct 24, 2024

load crs config failed

Status: Open.

#169 In corazawaf/coraza-caddy;

· dirac921 opened on Aug 28, 2024