github.com/projectdiscovery/nuclei/v3 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-76805Mediumgithub.com/projectdiscovery/nuclei/v3: Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz ModeCVE-2026-76804Mediumgithub.com/projectdiscovery/nuclei/v3: Nuclei: Local File Read via Workflow File-Protocol Gate BypassCVE-2026-76803Mediumgithub.com/projectdiscovery/nuclei/v3: Nuclei: Local File Read via MySQL Client Sandbox BypassCVE-2026-76802Mediumgithub.com/projectdiscovery/nuclei/v3: Nuclei: Arbitrary Command Execution via DAST Code Signature BypassCVE-2026-76819Highgithub.com/projectdiscovery/nuclei/v3: Nuclei: Arbitrary Code Execution via Goja JavaScript Engine VulnerabilityCVE-2026-41645Mediumgithub.com/projectdiscovery/nuclei/v3: Nuclei: Environment variable disclosure via Response-Derived DSL ExpressionsCVE-2026-41646Mediumgithub.com/projectdiscovery/nuclei/v3: Nuclei: Local File Read via require() Module Loader BypassCVE-2024-43405Mediumgithub.com/projectdiscovery/nuclei/v3: Nuclei Template Signature Verification BypassCVE-2024-40641Highgithub.com/projectdiscovery/nuclei/v3: projectdiscovery/nuclei allows unsigned code template execution through workflowsCVE-2024-27920Highgithub.com/projectdiscovery/nuclei/v3: Nuclei allows unsigned code template execution through workflows

Stop the waste.
Protect your environment with Kodem.