Attributed metadata history
Up to 100 retained publisher events per page for af14fdf417f2d11d32d30cd03ebe40b37e710aef8aa573cda638a8d351336659. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_732996d4d78decf6b7
observed · 2026-10-12 11:25:04 UTC
available
Fingerprint: 9a0f29d779ed105525dbafb009db821a5ae58acc46f95bd8f9161f2e63576dd8
intelligence_src_732996d4d78decf6b7
observed · 2026-10-12 11:25:04 UTC
What's Changed 🔒 Security fix: inspect XML attribute values across attack-detection rules — GHSA-6jp8-c2w2-x7wr fix: remove catastrophic backtracking in unix-shell-evasion prefix — GHSA-f5qm-3h4p-8qhg 🆕 New features and detections 🎉 feat: enable crs_validate_utf8_encoding by default by @fzipi in #4647 feat: added detection for quote evasion by @Xhoenix in #3813 feat(934): detect ORM lookup operator injection by @fzipi in #4659 fix(932): detect uninitialized variable spacer in RCE evasion prefix by @fzipi in #4652 🧰 Other Changes refactor: create 941170 .ra file by @fzipi in #4493 fix: Update restricted-files.data to include NPM subdirectories without causing FPs by @HackingRepo in #4653 fix: remove exponential backtracking in 933160/933161 comment suffix by @fzipi in #4666 fix(941140): remove exponential backtracking in CSS url(javascript) detection by @fzipi in #4670 fix(933180): remove exponential backtracking in variable-function noise suffix by @fzipi in #4669 fix(942390): move to regex-assembly by @fzipi in #4011 feat(crs-setup): add default actions for phases 3-5 by @Prateeksaini12 in #4675 fix(942522): avoid excessive backtracking by @EsadCetiner in #467
Fingerprint: 0857b7ab58bd50240b5dd35833b59f2a8f19ab2583cfa7563f4554f5ce3d71c2