PT-2026-118005 · Go · Github.Com/Corazawaf/Coraza+2
Published
2026-10-20
·
Updated
2026-10-20
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields in github.com/corazawaf/coraza
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Github.Com/Corazawaf/Coraza
Github.Com/Corazawaf/Coraza/V2
Github.Com/Corazawaf/Coraza/V3