CVE-2026-107835

Go/github.com/corazawaf/coraza/v3 CVE-2026-107835: medium 4

Coraza has Cookie Parser Confusion

Action: Upgrade github.com/corazawaf/coraza/v3 to 3.8.1 or later.

go get github.com/corazawaf/coraza/v3@v3.8.1

Affected

Fixed versions

Sources

• osv: GHSA-g4qm-m288-5cp9
• https://github.com/corazawaf/coraza/security/advisories/GHSA-g4qm-m288-5cp9
• https://github.com/corazawaf/coraza/commit/0b940e197ad9983fb3aa36e84f1f81ff985461af
• https://github.com/corazawaf/coraza/commit/9f8521398d1ff023b958fad0b944cac265763866
• https://github.com/corazawaf/coraza
• https://github.com/corazawaf/coraza/releases/tag/v3.8.1

CVE-2026-107835 · published 2026-10-08T17:51:30Z · modified 2026-10-19T21:40:49.823376643Z · JSON

Go/github.com/corazawaf/coraza CVE-2026-107835: medium 4

Coraza has Cookie Parser Confusion in github.com/corazawaf/coraza

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6694
• nvd: CVE-2026-107835
• https://github.com/corazawaf/coraza/security/advisories/GHSA-g4qm-m288-5cp9
• https://github.com/corazawaf/coraza/commit/0b940e197ad9983fb3aa36e84f1f81ff985461af
• https://github.com/corazawaf/coraza/commit/9f8521398d1ff023b958fad0b944cac265763866
• https://github.com/corazawaf/coraza/releases/tag/v3.8.1

CVE-2026-107835 · published 2026-10-19T21:08:17Z · modified 2026-10-19T21:40:49.823376643Z · JSON