Vulnerability GO-2026-6668
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 hours ago
October 20, 2026 at 12:20 AM UTC
Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding in github.com/corazawaf/coraza
v1.0.0-beta.1 - v1.2.0
v1.0.0-beta.1 - v1.2.0
Summary
Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding in github.com/corazawaf/coraza
Details
Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding in github.com/corazawaf/coraza
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion in github.com/corazawaf/coraza
v3.0.0 - v3.7.0 GO-2026-6690
v3.0.0 - v3.7.0 GO-2026-6690
Unknown
5 hours ago
Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion in github.com/corazawaf/coraza
v3.0.0 - v3.7.0 GO-2026-6690
v3.0.0 - v3.7.0 GO-2026-6690
Unknown
5 hours ago
Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion in github.com/corazawaf/coraza
v3.0.0 - v3.7.0 GO-2026-6690
v3.0.0 - v3.7.0 GO-2026-6690
Unknown
5 hours ago
Coraza: Multipart filename* (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules in github.com/corazawaf/coraza
v2.0.0-alpha.1 - v2.0.1 GO-2026-6691
v2.0.0-alpha.1 - v2.0.1 GO-2026-6691
Unknown
5 hours ago
Coraza: Multipart filename* (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules in github.com/corazawaf/coraza
v2.0.0-alpha.1 - v2.0.1 GO-2026-6691
v2.0.0-alpha.1 - v2.0.1 GO-2026-6691
Impacted packages
Timeline
Published
2 hours ago
October 20, 2026 at 12:20 AM UTC
Fixed (v3.8.1)
17 days ago
October 02, 2026 at 01:33 PM UTC
Last Modified
2 hours ago
October 20, 2026 at 12:45 AM UTC