CO
Product
coreruleset
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add coreruleset to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33691 | 7.5 | Apr 2 | OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks Affected: < 3.3.9; >= 4.0.0-rc1, < 4.25.0 |
| CVE-2026-21876 | 5.3 | Jan 8 | OWASP CRS has multipart bypass using multiple content-type parts Affected: < 4.22.0; < 3.3.8 |
Showing 2