Issues

• http-sensitive-files erroneously flags valid /repo.git access

  crowdsecurity/hub#2009 · Filter by author mklassen opened on Nov 11, 2026

• False positive on extension-less build assets: OnlyOffice DocumentServer 10, fonts trigger http-crawl-non_statics

  crowdsecurity/hub#2007 · Filter by author JMarcosHP opened on Nov 10, 2026

• rsyslog "message repeated N times" lines are undercounted or dropped on Ubuntu

  bug
  crowdsecurity/hub#2005 · Filter by author sabban opened on Nov 10, 2026

• sshd-logs: client-chosen text in sshd log lines can set source_ip, so anyone can get an arbitrary IP banned

  crowdsecurity/hub#2003 · Filter by author tommy-ng0 opened on Nov 9, 2026

• The Authelia parser (v0.9) doesn't classify Unsuccessful 1FA authentication attempt by user ''

  crowdsecurity/hub#2001 · Filter by author Pamalosebi opened on Nov 9, 2026

• Mealie 3.30.0: Authentication failures are not parsed due to changed log format

  crowdsecurity/hub#1999 · Filter by author Crash1602 opened on Nov 7, 2026

• Time format with time zone in Home Assistant parser

  crowdsecurity/hub#1998 · Filter by author bertmelis opened on Nov 7, 2026
  3

• Remediation Component inclusion: cs-unifi-bouncer-pro (UniFi Network 11, multi-site)

  crowdsecurity/hub#1986 · Filter by author developingchet opened on Nov 7, 2026

• Component inclusion request: cs-abuseipdb-bouncer (AbuseIPDB reporting integration)

  crowdsecurity/hub#1985 · Filter by author developingchet opened on Nov 6, 2026

• appsec-bot-challenge-exclude-social: Meta's IPv6 fetch sources can never match (rdns-only entry, no PTR, no ranges)

  crowdsecurity/hub#1983 · Filter by author Yuri989 opened on Nov 4, 2026

• Traefik parser fails to parse access log entries when backend URL uses h2c://

  crowdsecurity/hub#1966 · Filter by author comchk opened on Oct 28, 2026
  2

• sshd-logs: a single failed login produces 3-4 ssh_failed-auth events, so ssh-bf bans after 2 attempts

  crowdsecurity/hub#1952 · Filter by author tommy-ng0 opened on Oct 19, 2026

• crowdsecurity/naxsi-logs fails to parse NAXSI_EXLOG entries containing rid and encoded URIs

  crowdsecurity/hub#1946 · Filter by author shtefko opened on Oct 17, 2026

• crowdsecurity/crs serves a pre-4.0.0 CRS snapshot (OWASP_CRS/4.0.0-rc1), is an update to a current CRS release planned?

  crowdsecurity/hub#1939 · Filter by author olegglushak-megaport opened on Oct 15, 2026
  1

• [Feature request] Add official Stalwart Mail Server support to the CrowdSec Hub

  crowdsecurity/hub#1938 · Filter by author bonsaibauer opened on Oct 14, 2026
  2

• Parser fails on OPNsense when syslog/journald strips outer brackets

  crowdsecurity/hub#1935 · Filter by author Oski19831 opened on Oct 13, 2026

• proxmox-logs parser does not handle ipv4 addresses that are being displayed as ipv6 ideally

  crowdsecurity/hub#1934 · Filter by author F-Stop opened on Oct 12, 2026

• keycloak-logs grok pattern too broad

  crowdsecurity/hub#1908 · Filter by author kobobear opened on Sep 28, 2026
  3

• timokoessler/gitlab-logs not parsing rails logs.

  crowdsecurity/hub#1888 · Filter by author Y0ngg4n opened on Sep 10, 2026

• Bug: Most open-appsec log lines fail to parse

  waiting-for-user
  crowdsecurity/hub#1885 · Filter by author marnit0412-cpu opened on Sep 9, 2026
  4

• sshd-logs: missing patterns for OpenSSH 9.6 "maximum authentication attempts exceeded" and "Disconnecting invalid user" messages

  good first issuehelp wanted
  crowdsecurity/hub#1880 · Filter by author modem7 opened on Sep 4, 2026

• Gitea / Forgejo log parser does not check API access

  crowdsecurity/hub#1851 · Filter by author Flying--Dutchman opened on Jul 22, 2026

• firewallservices/pf-logs does not parse TCP fields from OPNsense filterlog

  crowdsecurity/hub#1850 · Filter by author Camellotsgo opened on Jul 22, 2026
  1

• Include subsonic auth errors into navidrome logs parser

  crowdsecurity/hub#1834 · Filter by author kamaeff opened on Jun 23, 2026

• Remediation Component inclusion: crowdsec-nginx-auth-bouncer

  crowdsecurity/hub#1831 · Filter by author PumbaLP opened on Jun 20, 2026