projectdiscovery/nuclei Security Advisories | GitStock

medium2026-09-22

CVE-2026-76805-Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

GHSA-jpvm-9frm-hjcq

medium2026-09-22

CVE-2026-76804-Nuclei: Local File Read via Workflow File-Protocol Gate Bypass

GHSA-qgw5-7j4f-fg97

medium2026-09-22

CVE-2026-76803-Nuclei: Local File Read via MySQL Client Sandbox Bypass

GHSA-xhmx-w2j4-rw3q

medium2026-09-22

CVE-2026-76802-Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

GHSA-jpf4-98qj-qr67

high2026-09-22

CVE-2026-76819-Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

GHSA-vxg7-f2jj-jmqm

medium2026-04-22

CVE-2026-41645-Nuclei: Environment variable disclosure via Response-Derived DSL Expressions

GHSA-jm34-66cf-qpvr

medium2026-04-22

CVE-2026-41646-Nuclei: Local File Read via require() Module Loader Bypass

GHSA-29rg-wmcw-hpf4

medium2024-09-04

CVE-2024-43405-Nuclei Template Signature Verification Bypass

GHSA-7h5p-mmpp-hgmm

high2024-07-17

CVE-2024-40641-projectdiscovery/nuclei allows unsigned code template execution through workflows

GHSA-c3q9-c27p-cw9h

high2024-03-15

CVE-2024-27920-Nuclei allows unsigned code template execution through workflows

GHSA-w5wx-6g2r-r78q

high2023-08-04

CVE-2023-37896-Nuclei Path Traversal vulnerability

GHSA-2xx4-jj5v-6mff