MEDIUM5.4Go
GHSA-q9f5-625g-xm39· CVE-2025-29914, GO-2025-3537OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME`
Modified: 3/25/2025
package
Go/github.com/jptosso/coraza-waf
pkg:go/github.com/jptosso/coraza-waf
—Go
GO-2025-3537· CVE-2025-29914, GHSA-q9f5-625g-xm39OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME` in github.com/corazawaf/coraza
Modified: 3/3/2026