TI-2024-29054 CVE-2024-43405 · GHSA-7h5p-mmpp-hgmm
Nuclei Template Signature Verification Bypass
Priority HIGH 69
Nuclei is a vulnerability scanner powered by YAML based templates.
projectdiscovery
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
projectdiscovery records in CISA KEVNo projectdiscovery vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Nuclei · all components
TI-2026-29888 CVE-2026-41282 · GHSA-vrr8-h7fq-ghr8
Code injection in projectdiscovery Nuclei
Priority HIGH 66
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection.
TI-2026-30165 CVE-2026-41646 · GHSA-29rg-wmcw-hpf4
Nuclei: Local File Read via require() Module Loader Bypass
Priority MEDIUM 58
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.
TI-2023-19329 CVE-2023-37896 · GHSA-2xx4-jj5v-6mff
Nuclei Path Traversal vulnerability
Priority MEDIUM 41
Nuclei is a vulnerability scanner.
TI-2024-18525 CVE-2024-27920 · GHSA-w5wx-6g2r-r78q
Unsigned code template execution through workflows in projectdiscovery/nuclei
Priority LOW 33
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL.
TI-2026-30164 CVE-2026-41645 · GHSA-jm34-66cf-qpvr
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions
Priority LOW 24
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.