Go/github.com/corazawaf/coraza/v3 CVE-2026-107834: medium 5.3

Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor

Action: Upgrade github.com/corazawaf/coraza/v3 to 3.8.0 or later.

go get github.com/corazawaf/coraza/v3@v3.8.0

Affected

Fixed versions

Sources

• osv: GHSA-rp9v-7xv3-r6g3
• https://github.com/corazawaf/coraza/security/advisories/GHSA-rp9v-7xv3-r6g3
• https://github.com/corazawaf/coraza/commit/1bc39036e99c88e7de60cf8e6bb55ee4c311223c
• https://github.com/corazawaf/coraza
• https://github.com/corazawaf/coraza/releases/tag/v3.8.0

CVE-2026-107834 · published 2026-10-08T17:52:00Z · modified 2026-10-19T21:41:16.115574313Z · JSON