Search results

perf: rule 941170 moz-binding branch regex slower than v3.3 (1.4–2.5× PCRE regression)

Status: Open.

#4633 In coreruleset/coreruleset;

· fzipi opened on May 8, 2026

Detection rules for WooCommerce facet/cart flood DDoS campaign

➖ False Negative - Evasion

Status: Open.

#4623 In coreruleset/coreruleset;

· wadejbeckett opened on Apr 23, 2026

Bug on regression test 941120-8

🐛 bugSomething isn't workingSomething isn't working

Status: Open.

#4622 In coreruleset/coreruleset;

· NoamAnisfeld opened on Apr 21, 2026

RFC: CRS Access Control Dimensions - Design Exploration

💡 ideasNote ideas to be evaluatedNote ideas to be evaluated

Status: Open.

Feature

#4615 In coreruleset/coreruleset;

· fzipi opened on Apr 16, 2026

Rule bypassing in PL2 using overlong UTF-8 encodings

➖ False Negative - Evasion

Status: Open.

#4612 In coreruleset/coreruleset;

· mitahantahankintunkis opened on Apr 14, 2026

Rule 932180 FP on "ultrasound" in Filename

➕ False Positive

Status: Open.

#4602 In coreruleset/coreruleset;

· ssigwart opened on Apr 1, 2026

CVE-derived payload research: FP reductions and FN improvements

Status: Open.

#4584 In coreruleset/coreruleset;

· zoutjebot opened on Mar 30, 2026

Command Injection evaison pl3

➖ False Negative - Evasion

Status: Open.

#4568 In coreruleset/coreruleset;

· HackingRepo opened on Mar 25, 2026

Block Origin: null and Origin: *

👍 Feature Request

Status: Open.

#4564 In coreruleset/coreruleset;

· HackingRepo opened on Mar 24, 2026

Windows Defender detects virus in version 4.24.1 Repro Zip

⏳ awaiting feedbackCRS dev asked feedbackCRS dev asked feedback

Status: Open.

#4554 In coreruleset/coreruleset;

· adcStefanAdam opened on Mar 20, 2026

Rules for AI Crawlers

👍 Feature Request

Status: Open.

#4527 In coreruleset/coreruleset;

· peq42 opened on Mar 5, 2026

Move regexes to regex-assembly format before LTS

🧙 regex-assembly

Status: Open.

#4480 In coreruleset/coreruleset;

· fzipi opened on Feb 28, 2026