GitHub · Where software is built

Labels Milestones New issue

ModSecurity Phase 2 Access Denied ignored by mod_proxy_http (Request forwarded despite 403)

#3509

· dantahoua opened

on Mar 10, 2026

Feature Request: Wildcard/pattern support in ctl:ruleRemoveTargetById (v3)

#3505

· etiennemunnich opened

on Feb 28, 2026

Feature Request: Add `ARGS_RAW`, `ARGS_GET_RAW`, `ARGS_POST_RAW`, and `ARGS_NAMES_RAW` Variables

#3501

· fzipi opened

on Feb 18, 2026

RFC: Let's kill mod_security2 for NGINX

🥇 good first issue

#3498

· fzipi opened

on Feb 16, 2026

Inconsistent Error Log Format of ModSecurity depending on Apache's ErrorLogFormat directive

#3472

· dune73 opened

on Dec 2, 2025

AFL fuzzer reports

#3469

· chenuduss opened

on Nov 21, 2025

Variable needed : REQUEST_HAS_BODY to avoid content-type evasion

#3466

· touchweb-vincent opened

on Nov 20, 2025

No "real" capture of HTTP:BL response

#3465

· nesretep-anp1 opened

on Nov 14, 2025

2.x standalone fails to link since ap_map_http_request_error() is not exported as APR function

#3451

· kabe-gh opened

on Oct 22, 2025

Build fails because of missing `library/base64.c` when using Mbed TLS 4.x — Is support planned?

#3450

· TheophileDiot opened

on Oct 20, 2025

Question: how is setenv supposed to work in ModSecurity 3.0.x

#3449

· duckasylum opened

on Oct 17, 2025

ModSecurity v2.9.12 “Skipping request since there is nowhere to write to” despite valid SecAuditLog configuration

#3446

· tinhutins opened

on Oct 15, 2025