F5 OWASP Top Ten Rules, no working NoSQL Injection properly

curl --location --request POST 'URL' \
--header 'token: TOKEN' \
--header 'Content-Type: application/json' \
--data-raw '{
      "link": {
        "$gt": null
      }
    }'

This is my Backend response running curl:

{"error":"NoSqlInjectionError","message":"Invalid request","code":0}

But in AWS insights we can see the WAF cannot stop the request, see the >>>> ALLOW <<<<

Field	Value
@ingestionTime	
1641197043827
@log	
AWSACCOUNT:LOG
@logStream	
LOGSTREAM
@message	
message
@timestamp	
1641196768228
action	
>>>> ALLOW <<<<
formatVersion	
1
httpRequest.clientIp	
XXX.XXX.XXX.XXX
httpRequest.country	
ES
httpRequest.headers.0.name	
host
httpRequest.headers.0.value	
XXX.XXX.XX
httpRequest.headers.1.name	
user-agent
httpRequest.headers.1.value	
curl/7.77.0
httpRequest.headers.2.name	
accept
httpRequest.headers.2.value	
*/*
httpRequest.headers.3.name	
HEADER
httpRequest.headers.3.value	
TOKENVALUE
httpRequest.headers.4.name	
content-type
httpRequest.headers.4.value	
application/json
httpRequest.headers.5.name	
content-length
httpRequest.headers.5.value	
51
httpRequest.httpMethod	
POST
httpRequest.httpVersion	
HTTP/2.0
httpRequest.requestId	
REQUEST_ID
httpRequest.uri	
URI
httpSourceId	
ALB
httpSourceName	
ALB
ruleGroupList.0.ruleGroupId	
F5#OWASP_Managed
ruleGroupList.1.ruleGroupId	
F5#Bots_Managed
ruleGroupList.2.ruleGroupId	
AWS#AWSManagedRulesAmazonIpReputationList
terminatingRuleId	
Default_Action
terminatingRuleType	
REGULAR
timestamp	
1641196768228
webaclId	
WEBACL

If you need more info, just say to us please, tnx for your response, i wish you nice day.

Hi Oscar77,

Sorry for late reply. I am working with backend team. I will update asap

Thanks

Mohamedfaizur