View this package for all CentOS/RHEL versions →

How to install nginx-owasp-crs (noarch)

OWASP ModSecurity Core Rule Set for Nginx

License: Apache-2.0 https://github.com/coreruleset/coreruleset

Install

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-owasp-crs

Description

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

RPMs

Package	Size	Built	Changes
nginx-owasp-crs-4.30.0-1.fc45.noarch	225 KiB	2026-11-04	Danila Vershinin - Fixed path-based command injection bypass in RCE rules. · - Lowercased charset parameter to prevent allow-list bypass. · - Collected all _charset_ values to avoid shadowing. · - Fixed broken Skip Checking Responses feature. · - Added detection for Active Directory command-line tools. · - Expanded Restricted Files data and added .claude. · - Allowed application/*+json content types by default. · - Dropped util directory, removed upstream (dev-only rule tooling).