intelligence_src_732996d4d78decf6b7
- Source-provided label
- Publisher RSS metadata
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Oct 03, 2026 17:49 UTC
- Retrieved
- Oct 14, 2026 11:29 UTC
v4.30.0
What's Changed 🔒 Security fix: inspect REQUEST_FILENAME in RCE (932) rules to close path-based command injection bypass — GHSA-575j-qr6p-9763 fix: lowercase the charset parameter name so mixed-case CHARSET= cannot skip the allow-list (920480) — GHSA-89h9-2j8h-9gp2 fix: collect every _charset_ value so a second value cannot shadow a disallowed charset (922100) — GHSA-qmx4-jfcv-fgww ⭐ Important changes fix: Skip Checking Responses feature is broken by @azurit in #4807 🆕 New features and detections 🎉 feat(932380): detect Active Directory DS command-line tools by @fzipi in #4768 feat(934200): detect Velocity and FreeMarker directive syntax by @Yeagerist0 in #4774 feat(unix): detect common selinux command usage by @EsadCetiner in #4724 feat: Add Mozilla/6.0 used by scanner tools by @HackingRepo in #4784 feat: Add .claude into restricted files by @azurit in #4809 feat: Expand Restricted Files data (v3) by @HackingRepo in #4816 🪦 Rule removals feat: refactoring of response rules skipping by @azurit in #4806 🧰 Other Changes fix(913100): substring false positive with veganism.social user-agent by @EsadCetiner in #4777 fix(932270): require boundary before tilde expansion patterns by @zoutjebot in #4596 fix(956100): FP with keyword 'EOFError' inside RESPONSE_BODY by @azurit in #4752 fix(951230): FP with too broad regex for RESPONSE_BODY by @azurit in #4747 fix: close trailing-slash bypass of upload extension check (V29-260924) by @fzipi in #4815 fix(932180): enforce boundaries for high-risk false positives entries by @EsadCetiner in #4632 feat: allow application/*+json and AWS JSON content types by default by @fzipi in #4775 fix(901370): allow + inside the subtype before the +json suffix by @fzipi in #4828 fix(libmodsecurity3/coraza): substring false positive with json key named profiledata by @EsadCetiner in #4812 New Contributors @Yeagerist0 made their first contribution in #4774 Full Changelog: v4.29.0...v4.30.0
Reference details
- Source category
- research-report
- First reported
- Oct 03, 2026 17:49 UTC
- Last reported
- Oct 03, 2026 17:49 UTC
- Catalog updated
- Oct 14, 2026 11:29 UTC
- Record ID
26ea35a66bb7b4babc69f177ceb28bd0307f35612529c5f7f4f3bfca79d5cc59
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_732996d4d78decf6b7Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.