coreruleset coreruleset

• CVE-2026-33691 Medium 6.8 OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks 3.8%
• CVE-2026-21876 Critical 9.3 OWASP CRS has multipart bypass using multiple content-type parts 17.7%