CO
Product
coraza
13
CVEs
0
On KEV
7.5
Max CVSS
12
New 30D
Severity mix
Critical 0High 2Medium 11Low 0
Watch
Add coraza to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107826 | 7.5 | Oct 9 | OWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash) Affected: >= 3.0.0, < 3.8.1 |
| CVE-2026-41510 | 7.2 | Oct 12 | OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding Affected: >= 3.0.0, < 3.8.1 |
Showing 2