owasp-modsecurity/ModSecurity-nginx

View on GitHub

ModSecurity v3 Nginx Connector

Stars: 1.9k
Forks: 312
Open beginner issues: 0
Indexed issues: 37

Dominant language: Perl
License: Apache-2.0
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 20, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

37 open issues indexed

Windows CI: flaky pcre2/zlib/openssl tarball download in test_new.yml's build-windows job Open

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

owasp-modsecurity/ModSecurity-nginx#388 · Opened Jul 28, 2026
Module logs version of libmodsecurity headers it was built against, not dynamically linked version Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#383 · 1 comment · Opened Jun 29, 2026
Intermittent nginx startup failure on modsecurity_rules_remote with libnginx-mod-http-modsecurity 1.0.3 / libmodsecurity 3.0.12 on Ubuntu Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#375 · 2 comments · Opened Apr 23, 2026
Unecessar escaped quote mark in JSON logs Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

owasp-modsecurity/ModSecurity-nginx#365 · 2 comments · Opened Dec 8, 2025
Wrong http_code in modsec logs when using auth_request Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

owasp-modsecurity/ModSecurity-nginx#363 · 13 comments · Opened Nov 11, 2025
Basic modsecurity setup with nginx docker image responds with HTML content but with content-type of text/plain Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

owasp-modsecurity/ModSecurity-nginx#362 · 2 comments · Opened Sep 30, 2025
Possible dereference of Null Open

:1st_place_medal: good first issue enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

owasp-modsecurity/ModSecurity-nginx#359 · 3 comments · Opened Jul 8, 2025
Can openssl be used instead of mbedtls Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

owasp-modsecurity/ModSecurity-nginx#358 · 2 comments · Opened Jun 17, 2025
NGINX has to be restarted after sys internal log rotation feature Open

duplicate

Difficulty 4/5 3-5 days Newbie friendliness 30/100

owasp-modsecurity/ModSecurity-nginx#351 · 2 comments · Opened Apr 18, 2025
Amazon-linux: unknown directive. Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

owasp-modsecurity/ModSecurity-nginx#350 · 2 comments · Opened Apr 17, 2025
Add an Option to Skip Body Inspections Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#343 · 1 comment · Opened Feb 13, 2025
Add an Option to Log Proxied Client IPs Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#341 · 3 comments · 1 reaction · Opened Feb 13, 2025
IncludeOptional error "modsecurity_rules_file" directive Rules error Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

owasp-modsecurity/ModSecurity-nginx#338 · 1 comment · Opened Jan 27, 2025
Unexpected Response Injection in ModSecurity-nginx Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#337 · 7 comments · 1 reaction · Opened Jan 17, 2025
Nginx: Ingress Issue while having modsecurity rules defined Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#335 · 1 comment · Opened Jan 6, 2025
Feature request: Using IPinfo IP to Country ASN database Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#333 · 3 comments · Opened Nov 16, 2024
ModSecurity Audit Log Shows 403 or 200, but Nginx Returns 500 or 499 Under High Traffic Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#331 · 4 comments · Opened Sep 9, 2024
Cannot find modsecurity in /usr/local/modsecurity/include and /usr/local/modsecurity/lib/ Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#329 · 5 comments · Opened Aug 20, 2024
No new version of the nginx connector has been cut in a long time(2 years) Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

owasp-modsecurity/ModSecurity-nginx#324 · 1 comment · 2 reactions · Opened May 30, 2024
size of the LMDB database file does not change Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#323 · 2 comments · Opened May 15, 2024
Audtilog not works with nginx default-backend Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#314 · 3 comments · 1 reaction · Opened Dec 6, 2023
Strange behaviour if `modsecurity off|on` set on `server` and `location` levels. Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

owasp-modsecurity/ModSecurity-nginx#292 · 2 comments · Opened Nov 25, 2022
Question about conflicting modsecurity_rules/modsecurity_rules_file precedence Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#280 · 10 comments · 1 reaction · Opened Apr 11, 2022
feature request: hook memory in modsecurity Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#279 · 3 comments · Opened Apr 1, 2022
Needs to include stdio.h in nginx/auto/feature for this to work Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

owasp-modsecurity/ModSecurity-nginx#265 · 5 comments · Opened Jan 19, 2022
Headers are already sent. Cannot perform the redirection at this point Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#254 · 2 comments · Opened Nov 10, 2021
Nginx+libmodsecurity and work with gzip Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

owasp-modsecurity/ModSecurity-nginx#251 · 8 comments · Opened Sep 13, 2021
Failed to handle valid XML request body larger than XML_MAX_LOOKUP_LIMIT Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#246 · Opened May 5, 2021
[Feature request] Expose Modsecurity variables to ngx/LUA Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

owasp-modsecurity/ModSecurity-nginx#234 · 3 comments · 6 reactions · Opened Dec 23, 2020
two server fields in json Open

owasp-modsecurity/ModSecurity-nginx#230 · 12 comments · 2 reactions · 1 assignee · Opened Dec 2, 2020
Synchronous process of the request destroys performance Open

owasp-modsecurity/ModSecurity-nginx#227 · 13 comments · 1 assignee · Opened Oct 7, 2020
SecRuleScript in chain rules Open

nostale

owasp-modsecurity/ModSecurity-nginx#213 · 4 comments · 1 assignee · Opened Jun 8, 2020
[Perf] Don't read full response into mem if not needed NGINX Open

nostale

owasp-modsecurity/ModSecurity-nginx#206 · 7 comments · 1 assignee · Opened May 28, 2020
Feature: Configurable Log Level Open

owasp-modsecurity/ModSecurity-nginx#205 · 6 comments · 5 reactions · 1 assignee · Opened May 23, 2020
ModSecurity False Positive with respect to logging in ModSec audit + NGX error logs due to NGINX behavior with error_page directive Open

nostale

Difficulty 4/5 3-5 days Newbie friendliness 35/100

owasp-modsecurity/ModSecurity-nginx#182 · 28 comments · 1 reaction · Opened Feb 20, 2020
Blocked Requests not logged in Debug mode Level 1 Open

nostale question work-in-progress

owasp-modsecurity/ModSecurity-nginx#179 · 7 comments · 1 assignee · Opened Feb 14, 2020
reopen audit log on SIGUSR1 and SIGHUP Open

enhancement no-issue-activity nostale

owasp-modsecurity/ModSecurity-nginx#121 · 30 comments · 19 reactions · 2 assignees · Opened Aug 6, 2018

owasp-modsecurity/ModSecurity-nginx

Get new issues in your inbox