HIGH7.5Go
GHSA-c2pj-v37r-2p6h· CVE-2023-40586, GO-2023-1874Coraza has potential denial of service vulnerability
Modified: 11/8/2023
package
Go/github.com/corazawaf/coraza/v2
pkg:go/github.com/corazawaf/coraza/v2
—Go
GO-2023-1874· CVE-2023-40586, GHSA-c2pj-v37r-2p6hDenial of service in github.com/corazawaf/coraza/v2 and v3
Modified: 5/20/2024
—Go
GO-2025-3537· CVE-2025-29914, GHSA-q9f5-625g-xm39OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME` in github.com/corazawaf/coraza
Modified: 3/3/2026