-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Pull requests: owasp-modsecurity/ModSecurity
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Allow
SecRuleScript without actions and stop parser state bleed into next rule
#3627
opened Sep 14, 2026 by
Copilot
AI
Loading…
add return value to acmp_build_binary_tree and check it result
#3626
opened Sep 14, 2026 by
chenuduss
Contributor
Loading…
IIS: fix ReadFileChunk latent overflow (allocate m_dwPageSize, not 1)
#3624
opened Aug 27, 2026 by
A13501350
Loading…
IIS: fix dead Host header fallback (r->hostname == NULL can never be true)
#3622
opened Aug 27, 2026 by
A13501350
Loading…
IIS: fix Content-Length formatting (correct printf specifier + full buffer size)
#3620
opened Aug 27, 2026 by
A13501350
Loading…
iis: drop chunked Transfer-Encoding when Content-Length is set
#3618
opened Aug 22, 2026 by
A13501350
Loading…
iis: fail closed (HTTP 500) on ModSecurity config load failure
#3617
opened Aug 22, 2026 by
A13501350
Loading…
Fix case-insensitive request header target exclusions
#3616
opened Aug 18, 2026 by
TejasButani001
Loading…
fix: record real response status for IIS audit log F part
2.x
Related to ModSecurity version 2.x
Platform - IIS
#3613
opened Aug 14, 2026 by
A13501350
Loading…
ci: statically link MinGW runtime into x86 fuzzy.dll and add 32-bit pool test
#3611
opened Aug 13, 2026 by
A13501350
Loading…
test/fuzzer: fix AFL harness input handling and restore it to a compiling state
#3607
opened Aug 1, 2026 by
shotintoeternity
Loading…
Allow connectors to avoid unused intervention log payload overhead
#3606
opened Aug 1, 2026 by
upgle
Loading…
fix(windows): pin Conan's CMake generator to match the project's
#3605
opened Jul 28, 2026 by
fzipi
Collaborator
Loading…
2 of 3 tasks
fix(iis): correct InstallModule32/64 CustomAction ID naming swap
2.x
Related to ModSecurity version 2.x
#3603
opened Jul 26, 2026 by
fzipi
Collaborator
Loading…
Fix checked parsing for argument and JSON depth limits
3.x
Related to ModSecurity version 3.x
#3602
opened Jul 23, 2026 by
AnnoyingTechnology
Loading…
feat: add opt-in build flag to match v2's @rx anchor semantics (#3295)
3.x
Related to ModSecurity version 3.x
#3600
opened Jul 19, 2026 by
fzipi
Collaborator
Loading…
3 tasks done
fix(collections): Honour SecDataDir for LMDB, fix literal setvar writ…
3.x
Related to ModSecurity version 3.x
#3597
opened Jul 10, 2026 by
20vikash
Loading…
clean cppcheck warnings in the iis/ ext/ and mlogc/ directories
2.x
Related to ModSecurity version 2.x
#3596
opened Jul 9, 2026 by
umprayz
Loading…
feat: make the pytest testing framework functional, migrate all v2 tests
2.x
Related to ModSecurity version 2.x
#3594
opened Jul 1, 2026 by
fzipi
Collaborator
Loading…
8 tasks done
Add SecUploadFileMode validation to rules_set_properties and regressi…
3.x
Related to ModSecurity version 3.x
#3583
opened Jun 22, 2026 by
Diamagnetic
Loading…
create fopen_modsec
3.x
Related to ModSecurity version 3.x
#3582
opened Jun 22, 2026 by
kanseiishikawa
Loading…
v3: Remove deprecated REQBODY_PROCESSOR_ERROR and REQBODY_PROCESSOR_ERROR_MSG
3.x
Related to ModSecurity version 3.x
#3579
opened Jun 17, 2026 by
hnakamur
Contributor
Loading…
Set MULTIPART_FILE_LIMIT_EXCEEDED variable
3.x
Related to ModSecurity version 3.x
#3575
opened Jun 15, 2026 by
hnakamur
Contributor
Loading…
Previous Next
ProTip!
Adding no:label will show everything without a label.