diff --git a/internal/appsec/waf/waf_test.go b/internal/appsec/waf/waf_test.go
index 12e1fc0974..e3e5f522dd 100644
--- a/internal/appsec/waf/waf_test.go
+++ b/internal/appsec/waf/waf_test.go
@@ -1133,6 +1133,11 @@ func TestDecoder(t *testing.T) {
 				ExpectedValue: map[string]interface{}{},
 				Object:        objBuilder(map[string]interface{}{}),
 			},
+			{
+				Name:          "nested",
+				ExpectedValue: []interface{}{"1", "2", map[string]interface{}{"foo": "bar", "bar": "baz", "baz": "foo"}, []interface{}{"1", "2", "3"}},
+				Object:        objBuilder([]interface{}{1, "2", map[string]string{"foo": "bar", "bar": "baz", "baz": "foo"}, []int{1, 2, 3}}),
+			},
 		} {
 			tc := tc
 			t.Run(tc.Name, func(t *testing.T) {