CVE-2026-107825 OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERYSTRING, ARGSGET, ARGSGETNAMES, and the GET-derived portion ...

CVE-2026-107825

The OWASP Coraza WAF library (versions 3.0.0 through 3.8.0 ) contains a vulnerability in the ProcessURI function located in internal/corazawaf/transaction.go. When url.ParseRequestURI fails, the system retains the raw URI but leaves variables like QUERY_STRING and ARGS_GET empty. An unauthenticat...

Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations

Root Cause File: internal/corazawaf/transaction.go, lines 834–866. go parsedURL, err := url.ParseRequestURIuri query := "" if err != nil tx.variables.urlencodedError.Seterr.Error path = uri tx.variables.requestURI.Seturi / tx.Variables.VARIABLEURIPARSEERROR.Set"1" posRawQuery := strings.Indexuri,...

GHSA-X26Q-WVHG-FH4M Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations

Root Cause File: internal/corazawaf/transaction.go, lines 834–866. go parsedURL, err := url.ParseRequestURIuri query := "" if err != nil tx.variables.urlencodedError.Seterr.Error path = uri tx.variables.requestURI.Seturi / tx.Variables.VARIABLEURIPARSEERROR.Set"1" posRawQuery := strings.Indexuri,...

EUVD-2021-26000

Malware in sbrugna...

PT-2021-22688

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible bypass of defense-in-depth due to missing validation of the return value in the ic startRetrieveEntryValue function of acropora/app/identity/ic.c. This could lead to local...

PT-2021-13055

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to a possible use of untrusted input due to improper input validation in DeltaPerformer::Write of delta performer.cc. This could lead to a local bypass of defense in depth protectio...

CVE-2019-11761

By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox 70,...

CVE-2019-11761

By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox 70,...

CVE-2019-13750

Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...

PT-2019-4906

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to insufficient data validation in SQLite within Google Chrome, allowing a remote attacker to bypass defense-in-depth measures. This can be achieved via a crafted HT...

PT-2017-1462

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description The issue is related to a lack of protection for service data in the Qualcomm bootloader of the Android operating system. It allows a remote attacker to enable a local malicious application to execute...