Search results

[BUG] Incorrect lexical prefix checks allow path containment bypass in filesystem trust boundaries

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7421 In projectdiscovery/nuclei;

· coderabbitai opened on May 22, 2026

[MAINTENANCE] Refactor javascript-protocol runtime lifecycle

Type: MaintenanceUpdating phrasing or wording to make things clearer or removing ambiguity.Updating phrasing or wording to make things clearer or removing ambiguity.

Status: Open.

#7417 In projectdiscovery/nuclei;

· dwisiswant0 opened on May 19, 2026

feat(sdk): reintroduce threadSafePerScan mode to guard construction-only options in thread-safe engine

Status: Open.

#7399 In projectdiscovery/nuclei;

· coderabbitai opened on May 12, 2026

[RFC] Raw HTTP Response Body Access for Compressed Responses

Status: Open.

#7387 In projectdiscovery/nuclei;

· dwisiswant0 opened on May 10, 2026

[RFC] Template Target Resolution Consolidation

Status: Open.

#7386 In projectdiscovery/nuclei;

· dwisiswant0 opened on May 8, 2026

[BUG] Full URI removed in unsafe raw requests

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7382 In projectdiscovery/nuclei;

· raphajohnsec opened on May 7, 2026

[BUG] ...malformed MIME header error when target returns duplicate HTTP status line

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7363 In projectdiscovery/nuclei;

· real-cnRay opened on Apr 25, 2026

[MAINTENANCE] govulncheck workflow fail

Status: Open.

#7346 In projectdiscovery/nuclei;

· dwisiswant0 opened on Apr 15, 2026

[BUG] networking services on HTTP ports are never scanned

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7323 In projectdiscovery/nuclei;

· chovanecadam opened on Apr 2, 2026

[MAINTENANCE] replace single-sample benchmark comparisons with repeated-sample + benchstat

Status: Open.

#7317 In projectdiscovery/nuclei;

· coderabbitai opened on Apr 1, 2026

[BUG] SARIF export fails validation

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7313 In projectdiscovery/nuclei;

· safejulian opened on Mar 31, 2026

[MAINTENANCE] expand native Go fuzz coverage across core packages

Status: Open.

#7312 In projectdiscovery/nuclei;

· coderabbitai opened on Mar 31, 2026