How to install nginx-owasp-crs (noarch)

OWASP ModSecurity Core Rule Set for Nginx

License: ASL 2.0 https://github.com/coreruleset/coreruleset

Install

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install nginx-owasp-crs

Description

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

RPMs

nginx-owasp-crs-4.20.0-1.sles15.noarch [222 KiB]

Danila Vershinin (2025-11-03) — - Updated restricted file extensions for enhanced security. · - Added configuration files for PrestaShop and Magento. · - Included 'expect' header in restricted headers list. · - Fixed missing capture keyword issue. · - Reduced false positives with JSON payloads. · - Corrected rules to block instead of pass. · - Updated regex to handle new payload formats.

nginx-owasp-crs-4.19.0-1.sles15.noarch [221 KiB]

Danila Vershinin (2025-10-03) — - upstream release v4.19.0

nginx-owasp-crs-4.18.0-1.sles15.noarch [221 KiB]

Danila Vershinin (2025-09-04) — - upstream release v4.18.0

nginx-owasp-crs-4.17.1-1.sles15.noarch [223 KiB]

Danila Vershinin (2025-08-06) — - upstream release v4.17.1

nginx-owasp-crs-4.17.0-1.sles15.noarch [223 KiB]

Danila Vershinin (2025-08-01) — - upstream release v4.17.0

nginx-owasp-crs-4.16.0-1.sles15.noarch [219 KiB]

Danila Vershinin (2025-06-30) — - upstream release v4.16.0

nginx-owasp-crs-4.15.0-1.sles15.noarch [217 KiB]

Danila Vershinin (2025-06-04) — - upstream release v4.15.0

nginx-owasp-crs-4.14.0-1.sles15.noarch [218 KiB]

Danila Vershinin (2025-04-30) — - upstream release v4.14.0

nginx-owasp-crs-4.13.0-1.sles15.noarch [217 KiB]

Danila Vershinin (2025-04-01) — - upstream release v4.13.0

nginx-owasp-crs-4.12.0-1.sles15.noarch [217 KiB]

Danila Vershinin (2025-03-03) — - upstream release v4.12.0