Vulnerabilities

TI-2026-30164 CVE-2026-41645 · GHSA-jm34-66cf-qpvr

Nuclei: Environment variable disclosure via Response-Derived DSL Expressions

LOW 24

Nuclei is a vulnerability scanner built on a simple YAML-based DSL.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00351 Published 2026-05-08 Fixed in 3.8.0 CWE-94

TI-2026-30165 CVE-2026-41646 · GHSA-29rg-wmcw-hpf4

MEDIUM 58

Nuclei is a vulnerability scanner built on a simple YAML-based DSL.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00114 Published 2026-05-08 Fixed in 3.8.0 CWE-284

TI-2026-29888 CVE-2026-41282 · GHSA-vrr8-h7fq-ghr8

HIGH 66

ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0025 Published 2026-04-20 Fixed in 3.8.0 CWE-94

TI-2024-29054 CVE-2024-43405 · GHSA-7h5p-mmpp-hgmm

HIGH 69

Nuclei is a vulnerability scanner powered by YAML based templates.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01109 Published 2024-09-04 Fixed in 3.3.2 CWE-78

TI-2024-18525 CVE-2024-27920 · GHSA-w5wx-6g2r-r78q

LOW 33

projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL.

CVSS 3.1HIGH 7.4 Local No auth User interaction EPSS 0.00411 Published 2024-03-15 Fixed in 3.2.0 CWE-78

TI-2023-19329 CVE-2023-37896 · GHSA-2xx4-jj5v-6mff

MEDIUM 41

Nuclei is a vulnerability scanner.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01048 Published 2023-08-04 Fixed in 2.9.9 CWE-22