I patched and rebuilt what I could and added custom Crowdsec WAF rules for this, in case I missed something.