PackageTrack
Sign in Get early access

github.com/crowdsecurity/crowdsec

v1.7.8 #213 most downloaded on Go modules crowdsecurity/crowdsec

What this package is like to depend on

Last release today

22 Aug 2026

Ships fairly regularly

a new release about every 9 days

Rarely documented

notes for 5 of 81 stable releases

Nothing withdrawn

no release was ever pulled

6 years old

1287 releases · first in 2020

164 releases in the last 12 months

see the full history below

Release timeline

1287 releases · Apr 2021 to Aug 2026
2022 2023 2024 2025 2026
Release Pre-release 87 older releases not drawn

Releases

latest 60 of 1287
  1. v1.8.0-rc1.0.20260822132033-7db403d35077 22 Aug 2026 pre-release

    Nothing published for this version

  2. v1.8.0-rc1.0.20260820091227-59e4156635f2 20 Aug 2026 pre-release

    Nothing published for this version

  3. v1.8.0-rc1.0.20260819144204-fadc3943154c 19 Aug 2026 pre-release

    Nothing published for this version

  4. v1.8.0-rc1.0.20260814151827-f1bc9db19e39 14 Aug 2026 pre-release

    Nothing published for this version

  5. v1.8.0-rc1.0.20260812155959-51ec508635ad 12 Aug 2026 pre-release

    Nothing published for this version

  6. v1.8.0-rc1.0.20260811124802-0166b317502a 11 Aug 2026 pre-release

    Nothing published for this version

  7. v1.8.0-rc1.0.20260810123511-79c657bc4b4b 10 Aug 2026 pre-release

    Nothing published for this version

  8. v1.8.0-rc1.0.20260806102414-863a4997afda 06 Aug 2026 pre-release

    Nothing published for this version

  9. v1.8.0-rc1.0.20260805080623-3d25833e787e 05 Aug 2026 pre-release

    Nothing published for this version

  10. v1.8.0-rc1.0.20260731081132-380bb2ed48c1 31 Jul 2026 pre-release

    Nothing published for this version

  11. v1.8.0-rc1.0.20260728152734-eb5391c224d6 28 Jul 2026 pre-release

    Nothing published for this version

  12. v1.8.0-rc1.0.20260728125914-7b6a8dab011b 28 Jul 2026 pre-release

    Nothing published for this version

  13. v1.8.0-rc1 27 Jul 2026 pre-release
    Release notes

    Bot detection with CrowdSec WAF

    This release brings a major change to the CrowdSec WAF: a bot detection feature.

    If enabled, clients will be served a challenge + fingerprinting page before accessing the website.
    CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not.

    You can find more information about this new feature in the documentation.

    Other notable changes include:

    • a dedicated kubernetes datasource: crowdsec will fetch logs directly from the k8s apiserver
    • new HTTP helpers for the expression language, to query external services from parsers and scenarios

    New Features

    Improvements

    Bug Fixes

    • fix(docker): allow spaces in ENROLL_INSTANCE_NAME (#4582) @sahilnyk
    • apiclient: return nil response if we couldnt connect to LAPI (#4573) @blotus
    • cscli lapi register: no error if the credentials file does not exist (#4570) @lopster568
    • fix(docker): avoid panic on colliding nested crowdsec labels (#4555) @arpitjain099
    • fix(syslog): don't close the shared acquisition output channel (#4553) @alxrxs
    • waf: track id/name pairs for all subrules (#4505) @blotus
    • apiserver: prevent from fetching JWT token from query string (#4554) @blotus
    • fix(leakybucket): emit overflow before pouring the next event (#4547) @blotus
    • loki: prevent duplicate log ingestion and improve timestamp handling (#4498) @Anulo2
    • db: use proper mutex when checking if flush can happen (#4528) @blotus
    • db: do not flush alerts with active decisions (#4527) @blotus
    • Fix Distinct() panic on []string and other non-[]any slices (#4543) @Synvoya
    • fix(docker): bouncer name strips wrong field from Docker secrets path (#4490) @tejgokani

    Chore / Deps

    Geolite2 notice

    This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

    Installation

    Take a look at the installation instructions.

    Open source →
  14. v1.7.8 11 May 2026
    Release notes

    New Features

    Improvements

    • WAF: enforce body size limitation (#4355) @blotus
    • Decision stream: move to chunked transfer by default (#4413) @blotus
    • cscli: add --quick flag to enroll command (#4350) @blotus
    • propose an alternative, cleaner configuration for appsec-config (#4397) @buixor

    Bug Fixes

    • cscli metrics: don't attempt to create a DB client if there's no DB config (#4451) @blotus
    • papi: don't spam logs if chan is closed (#4439) @blotus
    • alerts: use single transaction when creating alert and all related items (#4438) @blotus
    • LAPI: enforce maximum body size for decompression

    Chore / Deps

    Geolite2 notice

    This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

    Installation

    Take a look at the installation instructions.

    Open source →
  15. v1.7.8-rc1 05 May 2026 pre-release
    Release notes

    New Features

    Improvements

    • WAF: enforce body size limitation (#4355) @blotus
    • Decision stream: move to chunked transfer by default (#4413) @blotus
    • cscli: add --quick flag to enroll command (#4350) @blotus
    • propose an alternative, cleaner configuration for appsec-config (#4397) @buixor

    Bug Fixes

    • cscli metrics: don't attempt to create a DB client if there's no DB config (#4451) @blotus
    • papi: don't spam logs if chan is closed (#4439) @blotus
    • alerts: use single transaction when creating alert and all related items (#4438) @blotus

    Chore / Deps

    Geolite2 notice

    This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

    Installation

    Take a look at the installation instructions.

    Open source →
  16. v1.7.7 23 Mar 2026
    Release notes

    CrowdSec 1.7.7 brings 2 major changes:

    • On linux, RE2 is now used by default for evaluating regexp in parsers
    • WAF rules can now contain a mix of AND/OR conditions without any limits, giving much greater flexibility when writing new rules

    RE2 by default on linux

    CrowdsSec has supported for a long time using RE2 as the regexp engine, and with this release we make it the default.

    CrowdSec has always used the builtin Go regexp package, which is a Go reimplementation of the RE2 library, but with known performance limitations.

    The switch to RE2 will bring significantly increased regexp performance (one of the most critical part of CrowdSec) at the cost of slightly longer regexp compilation and higher baseline memory usage.

    Important

    If you encounter any issues with the new regexp engine, you can fallback to the previous Go implementation by setting the feature flag re2_disable_grok_support (see the documentation).

    Other changes

    Other notable changes include:

    • a new kind attribute for alerts used to identify its source (a scenario, a WAF rule, a manual decision creation, ...)
    • a new cscli allowlist import command
    • support for the HTTP_PROXY environment variable in the notification-http plugin
    • A resource leak under high load was fixed

    Full changelog

    New Features

    • add LookupFile and FileMap expr helpers (#4372) @buixor
    • waf rules: allow arbitrary mix of AND and OR conditions (#4358) @blotus

    Improvements

    Bug Fixes

    • allowlists: apply items to existing decisions in batch (#4095) @blotus
    • waf: fix tests for modsec rules generation (#4385) @blotus
    • windows: add file notification plugin in MSI package (#4367) @blotus
    • leakroutine: call cancel after leakroutine returns (#4369) @blotus
    • notification-sentinel: lower-case x-ms-date header for correct HMAC (#4288) @ebirn
    • tests: remove temporary sqlite/plugin files from /tmp/ (#4332) @mmetc
    • pkg/apiserver: fix scenario count in debug log (#4333) @mmetc
    • pkg/csplugin: prevent race condition, deadlock (#4294) @mmetc
    • pkg/acquisitioncontext: minimal fix for data race in tests (#4327) @mmetc
    • acquisition/file: minimal fix for data race in tests (#4326) @mmetc
    • fix lint fsutil/freebsd: unnecessary conversion (#4324) @mmetc
    • cscli: consistent status and usage message for unknown subcommands (#4320) @mmetc
    • cscli detect: set log type for caddy unit to "syslog" (#4321) @mmetc
    • CI: add published_at to version.crowdsec.net/latest (#4291) @blotus
    • cmd/crowdsec: assign overflow after parsing (#4226) @mmetc
    • waf: format as CRS match only if anomaly score is not 0 (#4230) @blotus

    Changes

    • build(deps): bump cryptography from 46.0.3 to 46.0.5 in /build/docker/test (#4298) @dependabot[bot]
    • support for waf- alias in cscli (#4347) @buixor
    • refact pkg/dumps: reduce complexity (#4209) @mmetc
    • lint: refact pkg/dumps for nilaway (#4208) @mmetc
    • refact pkg/parser: redundant indirection (#4344) @mmetc
    • refact pkg/parser: extract+embed NodeConfig in Node struct (#4343) @mmetc
    • move calls to trace.ReportPanic() on top of goroutines (#4338) @mmetc
    • pkg/csplugin: simplify notification loop; noop with empty queue (#4328) @mmetc
    • pkg/parsers: light refact, remove redundant code (#4213) @mmetc
    • refact cmd/crowdsec: encapsulate cache into alertBuffer (#4300) @mmetc
    • cmd/notification-*: don't provide the same context twice for request (#4316) @mmetc
    • don't flush 127.0.0.1 (#4315) @sabban
    • clipapi: replace tomb with errgroup (#4207) @mmetc
    • refact cmd/crowdsec: remove redundant global variable (#4299) @mmetc
    • refact: remove unused code in crowdsec-cli, apiserver, acquisition, database (#4304) @mmetc
    • refact pkg/leakybucket: trim down redundant Leaky struct fields (#4290) @mmetc
    • pkg/leakybucket: remove global bucketStore, unused parameters + tags (#4286) @mmetc
    • pkg/leakybucket: remove Simulated field from Leaky, keep it in config (#4285) @mmetc
    • pkg/leakybucket: extract BucketSpec from BucketFactory (#4284) @mmetc
    • refact pkg/leakybucket: extract methods from LoadBucket() part 2 (#4282) @mmetc
    • pkg/leakybucket: refact test loop, more explicit failures in testFile() (#4281) @mmetc
    • refact pkg/leakybucket: extract methods from LoadBucket() (#4279) @mmetc
    • pkg/leakybucket: replace Signal chan with explicit read/done chans (#4277) @mmetc
    • pkg/leakybucket: replace waitgroups with single rwlock (#4276) @mmetc
    • pkg/leakybucket: garbage collect: compare float with epsilon (#4275) @mmetc
    • pkg/leakybucket: refactor tests (#4272) @mmetc
    • pkg/leakybucket: replace sycn.Map with map + mutex (#4271) @mmetc
    • pkg/leakybucket: replace global counter with call to bucket store (#4273) @mmetc
    • pkg/leakybucket: review README.md (#4274) @mmetc
    • pkg/leakybucket: encapsulate store map + add methods (#4253) @mmetc
    • pkg/leakybucket: remove redundant bool var (#4252) @mmetc
    • fix hub console side (#4266) @sabban
    • version workflow fix (#4262) @sabban
    • rename the prod branch to main (#4261) @sabban
    • add version workflow (#4210) @sabban
    • pkg/leakybucket: remove unused global (#4251) @mmetc
    • pkg/leakybucket: pass bucket factories by pointer (#4250) @mmetc
    • pkt/leakybucket: compileScopeFilter() -> ScopeType.CompileFilter() (#4247) @mmetc
    • pkg/leakybucket: rename OverflowFilter -> OverflowProcessor (#4248) @mmetc
    • pkg/leakybucket: rename Buckets -> BucketStore (#4246) @mmetc
    • refact leaky bayesian: method to function, unlock w/defer (#4242) @mmetc
    • pkg/leakybucket: early return (#4244) @mmetc
    • pkg/leakybucket: variable shorthand (#4245) @mmetc
    • pkg/leakybucket: move LeakRoutine to method, rename parameters (#4243) @mmetc
    • pkg/leakybucket: review bucket validation and tests (#4241) @mmetc
    • refact: remove unnecessary pointers to map, string, mutex (#4212) @mmetc
    • pkg/leakybucket: function to method BucketFactory.LoadBucket() (#4229) @mmetc
    • pkg/leakybucket: BucketType interface, method BucketFactory.Validate() (#4228) @mmetc

    Chore / Deps

    Geolite2 notice

    This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

    Installation

    Take a look at the installation instructions.

    Open source →
  17. v1.7.7-rc1 23 Mar 2026 pre-release
    Release notes

    New Features

    • add LookupFile and FileMap expr helpers (#4372) @buixor
    • waf rules: allow arbitrary mix of AND and OR conditions (#4358) @blotus

    Improvements

    Bug Fixes

    • allowlists: apply items to existing decisions in batch (#4095) @blotus
    • waf: fix tests for modsec rules generation (#4385) @blotus
    • windows: add file notification plugin in MSI package (#4367) @blotus
    • leakroutine: call cancel after leakroutine returns (#4369) @blotus
    • notification-sentinel: lower-case x-ms-date header for correct HMAC (#4288) @ebirn
    • tests: remove temporary sqlite/plugin files from /tmp/ (#4332) @mmetc
    • pkg/apiserver: fix scenario count in debug log (#4333) @mmetc
    • pkg/csplugin: prevent race condition, deadlock (#4294) @mmetc
    • pkg/acquisitioncontext: minimal fix for data race in tests (#4327) @mmetc
    • acquisition/file: minimal fix for data race in tests (#4326) @mmetc
    • fix lint fsutil/freebsd: unnecessary conversion (#4324) @mmetc
    • cscli: consistent status and usage message for unknown subcommands (#4320) @mmetc
    • cscli detect: set log type for caddy unit to "syslog" (#4321) @mmetc
    • CI: add published_at to version.crowdsec.net/latest (#4291) @blotus
    • cmd/crowdsec: assign overflow after parsing (#4226) @mmetc
    • waf: format as CRS match only if anomaly score is not 0 (#4230) @blotus

    Changes

    • build(deps): bump cryptography from 46.0.3 to 46.0.5 in /build/docker/test (#4298) @dependabot[bot]
    • support for waf- alias in cscli (#4347) @buixor
    • refact pkg/dumps: reduce complexity (#4209) @mmetc
    • lint: refact pkg/dumps for nilaway (#4208) @mmetc
    • refact pkg/parser: redundant indirection (#4344) @mmetc
    • refact pkg/parser: extract+embed NodeConfig in Node struct (#4343) @mmetc
    • move calls to trace.ReportPanic() on top of goroutines (#4338) @mmetc
    • pkg/csplugin: simplify notification loop; noop with empty queue (#4328) @mmetc
    • pkg/parsers: light refact, remove redundant code (#4213) @mmetc
    • refact cmd/crowdsec: encapsulate cache into alertBuffer (#4300) @mmetc
    • cmd/notification-*: don't provide the same context twice for request (#4316) @mmetc
    • don't flush 127.0.0.1 (#4315) @sabban
    • clipapi: replace tomb with errgroup (#4207) @mmetc
    • refact cmd/crowdsec: remove redundant global variable (#4299) @mmetc
    • refact: remove unused code in crowdsec-cli, apiserver, acquisition, database (#4304) @mmetc
    • refact pkg/leakybucket: trim down redundant Leaky struct fields (#4290) @mmetc
    • pkg/leakybucket: remove global bucketStore, unused parameters + tags (#4286) @mmetc
    • pkg/leakybucket: remove Simulated field from Leaky, keep it in config (#4285) @mmetc
    • pkg/leakybucket: extract BucketSpec from BucketFactory (#4284) @mmetc
    • refact pkg/leakybucket: extract methods from LoadBucket() part 2 (#4282) @mmetc
    • pkg/leakybucket: refact test loop, more explicit failures in testFile() (#4281) @mmetc
    • refact pkg/leakybucket: extract methods from LoadBucket() (#4279) @mmetc
    • pkg/leakybucket: replace Signal chan with explicit read/done chans (#4277) @mmetc
    • pkg/leakybucket: replace waitgroups with single rwlock (#4276) @mmetc
    • pkg/leakybucket: garbage collect: compare float with epsilon (#4275) @mmetc
    • pkg/leakybucket: refactor tests (#4272) @mmetc
    • pkg/leakybucket: replace sycn.Map with map + mutex (#4271) @mmetc
    • pkg/leakybucket: replace global counter with call to bucket store (#4273) @mmetc
    • pkg/leakybucket: review README.md (#4274) @mmetc
    • pkg/leakybucket: encapsulate store map + add methods (#4253) @mmetc
    • pkg/leakybucket: remove redundant bool var (#4252) @mmetc
    • fix hub console side (#4266) @sabban
    • version workflow fix (#4262) @sabban
    • rename the prod branch to main (#4261) @sabban
    • add version workflow (#4210) @sabban
    • pkg/leakybucket: remove unused global (#4251) @mmetc
    • pkg/leakybucket: pass bucket factories by pointer (#4250) @mmetc
    • pkt/leakybucket: compileScopeFilter() -> ScopeType.CompileFilter() (#4247) @mmetc
    • pkg/leakybucket: rename OverflowFilter -> OverflowProcessor (#4248) @mmetc
    • pkg/leakybucket: rename Buckets -> BucketStore (#4246) @mmetc
    • refact leaky bayesian: method to function, unlock w/defer (#4242) @mmetc
    • pkg/leakybucket: early return (#4244) @mmetc
    • pkg/leakybucket: variable shorthand (#4245) @mmetc
    • pkg/leakybucket: move LeakRoutine to method, rename parameters (#4243) @mmetc
    • pkg/leakybucket: review bucket validation and tests (#4241) @mmetc
    • refact: remove unnecessary pointers to map, string, mutex (#4212) @mmetc
    • pkg/leakybucket: function to method BucketFactory.LoadBucket() (#4229) @mmetc
    • pkg/leakybucket: BucketType interface, method BucketFactory.Validate() (#4228) @mmetc

    Chore / Deps

    Geolite2 notice

    This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

    Installation

    Take a look at the installation instructions.

    Open source →
  18. v1.7.6 23 Jan 2026
    Release notes

    Changes

    Bug Fixes

    • cmd/crowdsec: assign overflow after parsing (#4225) @mmetc

    Geolite2 notice

    This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

    Installation

    Take a look at the installation instructions.

    Open source →
  19. v1.7.6-0.20260727080842-d3b1c0ba8c19 27 Jul 2026 pre-release

    Nothing published for this version

  20. v1.7.6-0.20260724135840-b59de6fb4feb 24 Jul 2026 pre-release

    Nothing published for this version

  21. v1.7.6-0.20260723222451-a88b497b471e 23 Jul 2026 pre-release

    Nothing published for this version

  22. v1.7.6-0.20260717095240-0a79ef8de52d 17 Jul 2026 pre-release

    Nothing published for this version

  23. v1.7.6-0.20260710105315-62844fa9ecea 10 Jul 2026 pre-release

    Nothing published for this version

  24. v1.7.6-0.20260709152632-84c3aab7b9d8 09 Jul 2026 pre-release

    Nothing published for this version

  25. v1.7.6-0.20260708154722-06be6270335a 08 Jul 2026 pre-release

    Nothing published for this version

  26. v1.7.6-0.20260707105352-112cc23e6cd4 07 Jul 2026 pre-release

    Nothing published for this version

  27. v1.7.6-0.20260706124959-1b2cd7036173 06 Jul 2026 pre-release

    Nothing published for this version

  28. v1.7.6-0.20260702143853-07f815dfc2a6 02 Jul 2026 pre-release

    Nothing published for this version

  29. v1.7.6-0.20260701153050-1f5e9c8dea40 01 Jul 2026 pre-release

    Nothing published for this version

  30. v1.7.6-0.20260629135755-4e57efb49fbc 29 Jun 2026 pre-release

    Nothing published for this version

  31. v1.7.6-0.20260531204308-b962bc0d479e 31 May 2026 pre-release

    Nothing published for this version

  32. v1.7.6-0.20260520125028-5ce91a00b7ef 20 May 2026 pre-release

    Nothing published for this version

  33. v1.7.6-0.20260519073009-baa39fb8a586 19 May 2026 pre-release

    Nothing published for this version

  34. v1.7.6-0.20260511074515-b4b2de2cfcbc 11 May 2026 pre-release

    Nothing published for this version

  35. v1.7.6-0.20260507135113-56d0d6915f7f 07 May 2026 pre-release

    Nothing published for this version

  36. v1.7.6-0.20260507110210-c3696a709810 07 May 2026 pre-release

    Nothing published for this version

  37. v1.7.6-0.20260505134849-54db427523e2 05 May 2026 pre-release

    Nothing published for this version

  38. v1.7.6-0.20260428160033-847fe3e5ec13 28 Apr 2026 pre-release

    Nothing published for this version

  39. v1.7.6-0.20260427093204-ef8e8c5d75d5 27 Apr 2026 pre-release

    Nothing published for this version

  40. v1.7.6-0.20260415100240-7d4daefa777e 15 Apr 2026 pre-release

    Nothing published for this version

  41. v1.7.6-0.20260410140555-b0f524555d5a 10 Apr 2026 pre-release

    Nothing published for this version

  42. v1.7.6-0.20260323133021-981e61661214 23 Mar 2026 pre-release

    Nothing published for this version

  43. v1.7.6-0.20260316150151-d086ab674f2d 16 Mar 2026 pre-release

    Nothing published for this version

  44. v1.7.6-0.20260306085651-d8eb85d9ae34 06 Mar 2026 pre-release

    Nothing published for this version

  45. v1.7.6-0.20260226105700-b4c8f877c658 26 Feb 2026 pre-release

    Nothing published for this version

  46. v1.7.6-0.20260223094718-ceb9987a450a 23 Feb 2026 pre-release

    Nothing published for this version

  47. v1.7.6-0.20260220154453-cba68bc77167 20 Feb 2026 pre-release

    Nothing published for this version

  48. v1.7.6-0.20260217134625-a3dbe7f34c13 17 Feb 2026 pre-release

    Nothing published for this version

  49. v1.7.6-0.20260217094519-7f29c376ce30 17 Feb 2026 pre-release

    Nothing published for this version

  50. v1.7.6-0.20260212131324-356d3111dda7 12 Feb 2026 pre-release

    Nothing published for this version

  51. v1.7.6-0.20260205132528-1df2c5578d09 05 Feb 2026 pre-release

    Nothing published for this version

  52. v1.7.6-0.20260203145452-4624f982f5ff 03 Feb 2026 pre-release

    Nothing published for this version

  53. v1.7.6-0.20260203141613-991682f88ecb 03 Feb 2026 pre-release

    Nothing published for this version

  54. v1.7.6-0.20260202144357-1389912dcf7a 02 Feb 2026 pre-release

    Nothing published for this version

  55. v1.7.6-0.20260130162708-a08725ef836e 30 Jan 2026 pre-release

    Nothing published for this version

  56. v1.7.6-0.20260129114000-db5470a098f5 29 Jan 2026 pre-release

    Nothing published for this version

  57. v1.7.6-0.20260127170020-a7d12e135837 27 Jan 2026 pre-release

    Nothing published for this version

  58. v1.7.6-0.20260127095331-0347b7be9681 27 Jan 2026 pre-release

    Nothing published for this version

  59. v1.7.6-0.20260126154944-6748d4797899 26 Jan 2026 pre-release

    Nothing published for this version

  60. v1.7.6-0.20260126125103-569271eee25b 26 Jan 2026 pre-release

    Nothing published for this version

Every package, every release, already written down.

The archive is open and free. Watching your own project is what we are building next.

Browse the archive