SecLang

Rule 200001 turns a buffered prompt into fields the OWASP Core Rule Set can match

Solo's agentgateway runs Coraza as a shared extension, and the write-up's own warning is that a WAFPolicy without HeadersAndBody mode and a JSON body processor will pass every payload while looking healthy.