Product by Go
Github.com/corazawaf/coraza
12 known vulnerabilities in Github.com/corazawaf/coraza (Go), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-107826 | Coraza: Uncontrolled Recursion | 7.5 | |
| High | CVE-2026-41510 | Coraza: Allocation of Resources Without Limits or Throttling | 7.2 | |
| Medium | CVE-2026-41508 | Coraza: Improper Handling of Exceptional Conditions | 5.8 | |
| Medium | CVE-2026-107833 | OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion | 5.9 | |
| Medium | CVE-2026-114100 | Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type | 5.8 | |
| Medium | CVE-2026-41504 | Coraza: CRLF Injection | 5.8 | |
| Medium | CVE-2026-114099 | V3: Improper Input Validation | 5.8 | |
| Medium | CVE-2026-104774 | OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass | 5.8 | |
| Medium | CVE-2026-114101 | V3: Improper Input Validation | 4.0 | |
| Medium | CVE-2026-107834 | Coraza: Missing Release of Resource after Effective Lifetime | 5.3 | |
| Medium | CVE-2026-107825 | Coraza: Improper Input Validation | 4.0 | |
| Medium | CVE-2026-107835 | OWASP Coraza WAF: Cookie Parser Confusion | 4.0 |