- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 11 · 4 high, 7 medium
- Registry
- pkg.go.dev
Advisories 11
- CVE-2026-76805Medium 5.3
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode
Affected: all versions.
- CVE-2026-76802Medium 4.7
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass
Affected: all versions.
- CVE-2026-76804Medium 5.5
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass
Affected: all versions.
- CVE-2026-76803Medium 5.3
Nuclei: Local File Read via MySQL Client Sandbox Bypass
Affected: all versions.
- CVE-2026-41645Medium 5.3
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions
Affected: all versions.
- CVE-2026-41646Medium 5.5
Nuclei: Local File Read via require() Module Loader Bypass
Affected: all versions.
- CVE-2026-41282Medium 4.0
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection.
Affected: all versions.
- CVE-2024-43405High 7.4
Nuclei Template Signature Verification Bypass
Affected: all versions.
- CVE-2024-40641High 7.4
Unsigned code template execution through workflows in projectdiscovery/nuclei
Affected: all versions.
- CVE-2024-27920High 7.4
Unsigned code template execution through workflows in projectdiscovery/nuclei
Affected: all versions.
- CVE-2023-37896High 7.5
Nuclei Path Traversal vulnerability
Affected: fixed in 2.9.9.