Issues

• LAPI: GET /v1/alerts stuck in sqlite3_step for hours, pinning one CPU core (v1.7.8, SQLite/WAL)

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4526 · Filter by author lweikit opened on Jun 27, 2026
  3

• False-positive block of facebookexternalhit through community-blocklist

  kind/bugneeds/triageversion/1.7.8
  crowdsecurity/crowdsec#4518 · Filter by author Simbiat opened on Jun 18, 2026
  3

• nftables bouncer ignores ipset_type and fails to block CIDR subnets due to missing interval flag

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4517 · Filter by author Tamila-2017 opened on Jun 15, 2026
  2

• CrowdSec agent enters CPU runaway state after ~3 hours, becomes unresponsive to SIGTERM

  kind/bugneeds/triageos/linux
  crowdsecurity/crowdsec#4516 · Filter by author GibsonSWE opened on Jun 13, 2026
  2

• MySQL: AppSec alert insert fails on O2M edge linking (alert_metas / alert_events)

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4506 · Filter by author pepordev opened on Jun 10, 2026
  4

• [WAF] pass rule is considered as reason for alert

  kind/bugneeds/triageos/linux
  crowdsecurity/crowdsec#4497 · Filter by author victoredvardsson opened on Jun 3, 2026
  2

• Banned after a normal Nextcloud request

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4491 · Filter by author Ophrys78 opened on May 29, 2026
  1

• Plugin broker drops notifications (race between Dying channel and pending alerts)

  kind/bugneeds/triageos/linux
  crowdsecurity/crowdsec#4487 · Filter by author andreabravetti opened on May 24, 2026
  4

• Notification plugin for NATS

  kind/featureneeds/triage
  crowdsecurity/crowdsec#4485 · Filter by author andreabravetti opened on May 23, 2026
  5

• Gradual CPU leak: 5% to 345% over 13 days with auditd-logs parser (v1.7.8)

  kind/bugneeds/triageos/linux
  crowdsecurity/crowdsec#4477 · Filter by author Zendorea opened on May 20, 2026
  14

• GET /v1/alerts?origin=X causes systematic timeout (25s+) while same query without origin= responds in 13ms

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4470 · Filter by author jmrGrav opened on May 16, 2026
  7

• cscli hub update: intermittent 'connection reset' on HEAD via IPv6 to cdn-hub.crowdsec.net

  needs/kindneeds/triage
  crowdsecurity/crowdsec#4469 · Filter by author fusengine opened on May 16, 2026
  2

• Re-install of bouncer fails to add service

  kind/bugneeds/triageos/linux
  crowdsecurity/crowdsec#4446 · Filter by author LordJuice1 opened on Apr 29, 2026
  7

• lookup www.arvancloud.ir on 192.168.1.254:53: no such host

  kind/bugneeds/triageos/linux
  crowdsecurity/crowdsec#4436 · Filter by author rhclayto opened on Apr 25, 2026
  1

• Elasticsearch acquisition module

  kind/featureneeds/triage
  crowdsecurity/crowdsec#4427 · Filter by author spnngl opened on Apr 11, 2026
  3

• Possible false positive generating ~50% of daily alerts

  kind/bugneeds/triageversion/1.7.6
  crowdsecurity/crowdsec#4363 · Filter by author marnit0412-cpu opened on Mar 10, 2026
  1

• UnmarshalJSON

  kind/bugneeds/triageversion/1.7.6
  crowdsecurity/crowdsec#4335 · Filter by author Simbiat opened on Feb 25, 2026
  3

• CrowdSec stopped generating new alerts after reaching 10,000 - possible alert limit?

  kind/bugneeds/triageversion/1.7.6
  crowdsecurity/crowdsec#4331 · Filter by author marnit0412-cpu opened on Feb 24, 2026
  6

• Community Resource: awesome-crowdsec curated list

  kind/enhancementneeds/triage
  crowdsecurity/crowdsec#4314 · Filter by author wolffcatskyy opened on Feb 16, 2026
  3

• Enhancing open-appsec logs in CrowdSec for better incident analysis

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4313 · Filter by author marnit0412-cpu opened on Feb 13, 2026
  3

• Appsec: Incorrect URL parameter count with CRS

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4311 · Filter by author bufadu opened on Feb 13, 2026
  1

• cscli papi status - unclear message for status 402

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4309 · Filter by author mmetc opened on Feb 13, 2026
  1

• No bouncer metrics collected from NPMplus

  kind/bugneeds/triageversion/1.7.6
  crowdsecurity/crowdsec#4297 · Filter by author arktisk-varg opened on Feb 10, 2026
  6

• [FreeBSD] cscli decisions list returns alerts instead of decisions in JSON output

  kind/bugneeds/triage
  crowdsecurity/crowdsec#4293 · Filter by author jostreff opened on Feb 6, 2026
  4

• [Feature Request] Graceful handling & stale-data fallback for HTTP data sources

  needs/kindneeds/triagequestion
  crowdsecurity/crowdsec#4259 · Filter by author stefanschlipfi opened on Jan 29, 2026
  8