OWASP Coraza WAF has parser confusion which leads to wrong URI in REQUEST_FILENAME in github.com/corazawaf/coraza
REQUEST_FILENAME
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2025-3537" }