Issues

• sshd-logs: a single failed login produces 3-4 ssh_failed-auth events, so ssh-bf bans after 2 attempts

  crowdsecurity/hub#1952 · Filter by author tommy-ng0 opened on Oct 19, 2026

• crowdsecurity/naxsi-logs fails to parse NAXSI_EXLOG entries containing rid and encoded URIs

  crowdsecurity/hub#1946 · Filter by author shtefko opened on Oct 17, 2026

• fix(plex-allowlist): allow subtitle transcode bursts on HTTP 400

  crowdsecurity/hub#1945 · Filter by author LegionicN7 opened on Oct 17, 2026

• crowdsecurity/crs serves a pre-4.0.0 CRS snapshot (OWASP_CRS/4.0.0-rc1), is an update to a current CRS release planned?

  crowdsecurity/hub#1939 · Filter by author olegglushak-megaport opened on Oct 15, 2026

• [Feature request] Add official Stalwart Mail Server support to the CrowdSec Hub

  crowdsecurity/hub#1938 · Filter by author bonsaibauer opened on Oct 14, 2026
  2

• Parser fails on OPNsense when syslog/journald strips outer brackets

  crowdsecurity/hub#1935 · Filter by author Oski19831 opened on Oct 13, 2026

• proxmox-logs parser does not handle ipv4 addresses that are being displayed as ipv6 ideally

  crowdsecurity/hub#1934 · Filter by author F-Stop opened on Oct 12, 2026

• nextcloud-whitelist: WebDAV PUT 404s from sync clients trigger crowdsecurity/http-probing

  crowdsecurity/hub#1915 · Filter by author nowheretobefound opened on Oct 4, 2026
  1

• keycloak-logs grok pattern too broad

  crowdsecurity/hub#1908 · Filter by author kobobear opened on Sep 28, 2026
  1

• groupby in http-probing and http-crawl-non_statics references evt.Parsed.target_fqdn, which doesn't exist — should be evt.Meta.target_fqdn

  crowdsecurity/hub#1906 · Filter by author mikegleasonjr opened on Sep 23, 2026
  3

• timokoessler/gitlab-logs not parsing rails logs.

  crowdsecurity/hub#1888 · Filter by author Y0ngg4n opened on Sep 10, 2026

• Bug: Most open-appsec log lines fail to parse

  waiting-for-user
  crowdsecurity/hub#1885 · Filter by author marnit0412-cpu opened on Sep 9, 2026
  4

• [Proposal] Add support for PgBouncer authentication failure log format

  good first issuehelp wanted
  crowdsecurity/hub#1881 · Filter by author VATICAN-PSYCHO opened on Sep 6, 2026
  1

• sshd-logs: missing patterns for OpenSSH 9.6 "maximum authentication attempts exceeded" and "Disconnecting invalid user" messages

  good first issuehelp wanted
  crowdsecurity/hub#1880 · Filter by author modem7 opened on Sep 4, 2026

• Nextcloud Memories normal preview traffic triggers crowdsecurity/http-probing

  crowdsecurity/hub#1857 · Filter by author cbrans-ops opened on Aug 7, 2026
  1

• False positive: vpatch-CVE-2023-42793 blocks Dahua Web5 cameras using /RPC2 endpoint

  crowdsecurity/hub#1852 · Filter by author jbhamon opened on Jul 27, 2026
  1

  

• Gitea / Forgejo log parser does not check API access

  crowdsecurity/hub#1851 · Filter by author Flying--Dutchman opened on Jul 22, 2026

• firewallservices/pf-logs does not parse TCP fields from OPNsense filterlog

  crowdsecurity/hub#1850 · Filter by author Camellotsgo opened on Jul 22, 2026
  1

• Parser jusabatier/apereo-cas not working with CAS 7.x

  crowdsecurity/hub#1838 · Filter by author lctwo opened on Jul 3, 2026

• Include subsonic auth errors into navidrome logs parser

  crowdsecurity/hub#1834 · Filter by author kamaeff opened on Jun 23, 2026

• Remediation Component inclusion: crowdsec-nginx-auth-bouncer

  crowdsecurity/hub#1831 · Filter by author PumbaLP opened on Jun 20, 2026

• Request WAF ruleset: safe-crs

  crowdsecurity/hub#1816 · Filter by author indykoning opened on Jun 2, 2026
  4

• traefik-logs parser: add support for OpenTelemitry logs

  waiting-for-user
  crowdsecurity/hub#1808 · Filter by author kimdre opened on May 26, 2026
  1

  

• crowdsecurity/http-crawl-non_statics - false positive with seafile sync client

  help wanted
  crowdsecurity/hub#1793 · Filter by author opiateblush opened on May 9, 2026
  1

  

• scenarios/http-backdoors-attempts.yaml breaks NextCloud (and other regular web apps)

  crowdsecurity/hub#1785 · Filter by author wAmpIre opened on Apr 30, 2026
  2