HIGH7.5Go
GHSA-2xx4-jj5v-6mff· CVE-2023-37896, GO-2023-1998Nuclei Path Traversal vulnerability
Modified: 9/10/2026
package
Go/github.com/projectdiscovery/nuclei/v2
pkg:go/github.com/projectdiscovery/nuclei/v2
—Go
GO-2023-1998· CVE-2023-37896, GHSA-2xx4-jj5v-6mffImproper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2
Modified: 5/20/2024
—Go
GO-2024-2645· CVE-2024-27920, GHSA-w5wx-6g2r-r78qNuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei
Modified: 3/3/2026
—Go
GO-2024-2989· CVE-2024-40641, GHSA-c3q9-c27p-cw9hprojectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei
Modified: 3/3/2026
—Go
GO-2024-3114· CVE-2024-43405, GHSA-7h5p-mmpp-hgmmNuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei
Modified: 3/3/2026
—Go
GO-2026-4965· CVE-2026-41646, GHSA-29rg-wmcw-hpf4Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei
Modified: 5/20/2026
—Go
GO-2026-5473· CVE-2026-41282, CVE-2026-41645Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei
Modified: 7/8/2026