Attributed metadata history
Up to 100 retained publisher events per page for 26ea35a66bb7b4babc69f177ceb28bd0307f35612529c5f7f4f3bfca79d5cc59. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_732996d4d78decf6b7
observed · 2026-10-12 11:25:04 UTC
available
Fingerprint: 9a0f29d779ed105525dbafb009db821a5ae58acc46f95bd8f9161f2e63576dd8
intelligence_src_732996d4d78decf6b7
observed · 2026-10-12 11:25:04 UTC
What's Changed 🔒 Security fix: inspect REQUEST_FILENAME in RCE (932) rules to close path-based command injection bypass — GHSA-575j-qr6p-9763 fix: lowercase the charset parameter name so mixed-case CHARSET= cannot skip the allow-list (920480) — GHSA-89h9-2j8h-9gp2 fix: collect every _charset_ value so a second value cannot shadow a disallowed charset (922100) — GHSA-qmx4-jfcv-fgww ⭐ Important changes fix: Skip Checking Responses feature is broken by @azurit in #4807 🆕 New features and detections 🎉 feat(932380): detect Active Directory DS command-line tools by @fzipi in #4768 feat(934200): detect Velocity and FreeMarker directive syntax by @Yeagerist0 in #4774 feat(unix): detect common selinux command usage by @EsadCetiner in #4724 feat: Add Mozilla/6.0 used by scanner tools by @HackingRepo in #4784 feat: Add .claude into restricted files by @azurit in #4809 feat: Expand Restricted Files data (v3) by @HackingRepo in #4816 🪦 Rule removals feat: refactoring of response rules skipping by @azurit in #4806 🧰 Other Changes fix(913100): substring false positive with veganism.social user-agent by @EsadCetiner in #4777 fix(932270): require boundary before til
Fingerprint: 1456b47aca449674f5948155268d9a757b953fafed9ca05926adec6e5fce530e