intelligence_src_732996d4d78decf6b7
- Source-provided label
- Publisher RSS metadata
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Jul 02, 2026 08:20 UTC
- Retrieved
- Oct 17, 2026 02:14 UTC
v4.28.0
What's Changed 🔒 Security fix: inspect XML attribute values across attack-detection rules — GHSA-6jp8-c2w2-x7wr fix: remove catastrophic backtracking in unix-shell-evasion prefix — GHSA-f5qm-3h4p-8qhg 🆕 New features and detections 🎉 feat: enable crs_validate_utf8_encoding by default by @fzipi in #4647 feat: added detection for quote evasion by @Xhoenix in #3813 feat(934): detect ORM lookup operator injection by @fzipi in #4659 fix(932): detect uninitialized variable spacer in RCE evasion prefix by @fzipi in #4652 🧰 Other Changes refactor: create 941170 .ra file by @fzipi in #4493 fix: Update restricted-files.data to include NPM subdirectories without causing FPs by @HackingRepo in #4653 fix: remove exponential backtracking in 933160/933161 comment suffix by @fzipi in #4666 fix(941140): remove exponential backtracking in CSS url(javascript) detection by @fzipi in #4670 fix(933180): remove exponential backtracking in variable-function noise suffix by @fzipi in #4669 fix(942390): move to regex-assembly by @fzipi in #4011 feat(crs-setup): add default actions for phases 3-5 by @Prateeksaini12 in #4675 fix(942522): avoid excessive backtracking by @EsadCetiner in #4676 fix: 4RI-250413 by @EsadCetiner in #4672 fix: FPs related to RESPONSE_BODY by @azurit in #4684 New Contributors @Prateeksaini12 made their first contribution in #4661 Full Changelog: v4.27.0...v4.28.0
Reference details
- Source category
- research-report
- First reported
- Jul 02, 2026 08:20 UTC
- Last reported
- Jul 02, 2026 08:20 UTC
- Catalog updated
- Oct 17, 2026 02:14 UTC
- Record ID
af14fdf417f2d11d32d30cd03ebe40b37e710aef8aa573cda638a8d351336659
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_732996d4d78decf6b7Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.