Last Modified: Nov 05, 2025
Affected Product(s):
BIG-IP ASM
Fixed In:
21.0.0
Opened: Sep 19, 2024 Severity: 3-Major
Extended Latin or non-ASCII characters (e.g., ß, à, á, ä, ç, ü) are not blocked as instructed by a regular expression in the JSON schema in the API Security based policy.
Character validation does not work as intended, allowing disallowed Unicode characters to pass through.
This occurs when using the API Security template that includes regex-based validation rules that target Unicode ranges above U+00C0.
None
Expected blocking to Latin characters in JSON schema.