Issues

New issue

403 Response Code
#4165 · LaurenceJJones opened on Dec 19, 2025
Docker client version 1.52 is too new. Maximum supported API version is 1.43
#4122 · Wummeke opened on Dec 9, 2025
11

Microsoft Edge 153.0.0 incorrectly detected as CDP and challenge never completes
crowdsecurity/crowdsec#4723 · opened on Oct 1, 2026
4
[bot-detection] Fine-grained scoring mechanism
crowdsecurity/crowdsec#4714 · opened on Sep 29, 2026
1
Pace large blocklist pulls: insert in configurable chunks instead of one burst
crowdsecurity/crowdsec#4711 · opened on Sep 28, 2026
5
Retention for expired decisions, independent of alert retention
crowdsecurity/crowdsec#4703 · opened on Sep 25, 2026
3
Alert ip/range filter matches alerts whose decisions do not cover the address
crowdsecurity/crowdsec#4698 · opened on Sep 22, 2026
3
[Bot detection] Regenerate challenge only if served
crowdsecurity/crowdsec#4692 · opened on Sep 18, 2026
3
LAPI decision stream returns HTTP 200 with a valid empty snapshot after a database query failure
crowdsecurity/crowdsec#4691 · opened on Sep 16, 2026
1
Feature request: Detect CDP-driven browsers such as ZenDriver
crowdsecurity/crowdsec#4687 · opened on Sep 15, 2026
7
Redditbot is currently blocked by AppSec and not excluded from bot challenges
crowdsecurity/crowdsec#4685 · opened on Sep 14, 2026
6
Panic on shutdown when docker acquisition active: invalid memory address in tracker.Get (checkContainers)
crowdsecurity/crowdsec#4665 · opened on Sep 7, 2026
3
[Bot detection] Add a second kind of fingerprint collection
crowdsecurity/crowdsec#4662 · opened on Sep 5, 2026
5
Panic in MetricsProvider.sendMetrics (lpmetrics.go:389) - nil pointer dereference
crowdsecurity/crowdsec#4661 · opened on Sep 5, 2026
2
postinst/rpm scriptlet never detects api.server.enable: false (cscli prints &false), skips service start on agent-only hosts
crowdsecurity/crowdsec#4651 · opened on Sep 2, 2026
3
AppSec Bot detection broken by Content-Security-Policy set on front web server
crowdsecurity/crowdsec#4646 · opened on Sep 1, 2026
3
Crowdsec Signals starts banning me after some time
crowdsecurity/crowdsec#4641 · opened on Aug 29, 2026
2
LAPI: /v1/decisions/stream scans every expired decision when a bouncer has never completed a pull (last_pull IS NULL)
crowdsecurity/crowdsec#4613 · opened on Aug 15, 2026
1
Console only updates Security Engine after re-enrollment
crowdsecurity/crowdsec#4596 · opened on Aug 8, 2026
2
DISABLE_COLLECTIONS ignored when DISABLE_AGENT=true — LAPI-only container keeps unremovable default collections
crowdsecurity/crowdsec#4563 · opened on Jul 16, 2026
3
AppSec listeners can die permanently after SIGHUP reload while LAPI keeps running
crowdsecurity/crowdsec#4545 · opened on Jul 5, 2026 · Next release
3
LAPI: GET /v1/alerts stuck in sqlite3_step for hours, pinning one CPU core (v1.7.8, SQLite/WAL)
crowdsecurity/crowdsec#4526 · opened on Jun 27, 2026
3
False-positive block of facebookexternalhit through community-blocklist
crowdsecurity/crowdsec#4518 · opened on Jun 18, 2026
3
nftables bouncer ignores ipset_type and fails to block CIDR subnets due to missing interval flag
crowdsecurity/crowdsec#4517 · opened on Jun 15, 2026
2
CrowdSec agent enters CPU runaway state after ~3 hours, becomes unresponsive to SIGTERM
crowdsecurity/crowdsec#4516 · opened on Jun 13, 2026
2
MySQL: AppSec alert insert fails on O2M edge linking (alert_metas / alert_events)
crowdsecurity/crowdsec#4506 · opened on Jun 10, 2026
4
[WAF] pass rule is considered as reason for alert
crowdsecurity/crowdsec#4497 · opened on Jun 3, 2026
2

Navigation Menu

Issues

Issues

Microsoft Edge 153.0.0 incorrectly detected as CDP and challenge never completes

[bot-detection] Fine-grained scoring mechanism

Pace large blocklist pulls: insert in configurable chunks instead of one burst

Retention for expired decisions, independent of alert retention

Alert ip/range filter matches alerts whose decisions do not cover the address

[Bot detection] Regenerate challenge only if served

LAPI decision stream returns HTTP 200 with a valid empty snapshot after a database query failure

Feature request: Detect CDP-driven browsers such as ZenDriver

Redditbot is currently blocked by AppSec and not excluded from bot challenges

Panic on shutdown when docker acquisition active: invalid memory address in tracker.Get (checkContainers)

[Bot detection] Add a second kind of fingerprint collection

Panic in MetricsProvider.sendMetrics (lpmetrics.go:389) - nil pointer dereference

postinst/rpm scriptlet never detects api.server.enable: false (cscli prints &false), skips service start on agent-only hosts

AppSec Bot detection broken by Content-Security-Policy set on front web server

Crowdsec `Signals` starts banning me after some time

LAPI: /v1/decisions/stream scans every expired decision when a bouncer has never completed a pull (last_pull IS NULL)

Console only updates Security Engine after re-enrollment

DISABLE_COLLECTIONS ignored when DISABLE_AGENT=true — LAPI-only container keeps unremovable default collections

AppSec listeners can die permanently after SIGHUP reload while LAPI keeps running

LAPI: GET /v1/alerts stuck in sqlite3_step for hours, pinning one CPU core (v1.7.8, SQLite/WAL)

False-positive block of `facebookexternalhit` through `community-blocklist`

nftables bouncer ignores ipset_type and fails to block CIDR subnets due to missing interval flag

CrowdSec agent enters CPU runaway state after ~3 hours, becomes unresponsive to SIGTERM

MySQL: AppSec alert insert fails on O2M edge linking (alert_metas / alert_events)

[WAF] pass rule is considered as reason for alert