PT-2026-108704

Name of the Vulnerable Software and Affected Versions Coraza WAF versions 3.0.0 through 3.7.0 Description The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing JavaScript octal escape sequences. Specifically, in the file internal/transformations/js decode.go, the...