V
Vexday
by TrueHacking
›
PT
ES
EN
Intelligence
▾
Intelligence
Exploit Timeline
risk queue
Threats
ransomware · malware
Overview
observatory
Explore
▾
Explore
CVEs
Technologies
Vendors
Weakness types
Briefing
Live
Home
/
Technologies
/
corazawaf
Vulnerabilities in
corazawaf
2 results
CVE-2023-40586
HIGH
go package github.com/corazawaf/coraza is vulnerable to denial of service
EPSS
0.6%
CVE-2025-29914
MEDIUM
OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME`
EPSS
0.3%