Skip to content
Projectdiscovery vulnerabilities
Newest
-
projectdiscovery nuclei
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode
CVE-2026-76805
Fix available
5.3 Medium
-
projectdiscovery nuclei
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass
CVE-2026-76802
Fix available
4.7 Medium
-
projectdiscovery nuclei
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass
CVE-2026-76804
Fix available
5.5 Medium
-
projectdiscovery nuclei
Nuclei: Local File Read via MySQL Client Sandbox Bypass
CVE-2026-76803
Fix available
5.3 Medium
-
projectdiscovery nuclei
Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache
CVE-2026-92718
7.0 High
-
projectdiscovery nuclei
Nuclei: Local File Read via require() Module Loader Bypass
CVE-2026-41646
Fix available
5.5 Medium
-
projectdiscovery nuclei
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions
CVE-2026-41645
Fix available
5.3 Medium
-
projectdiscovery nuclei
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env...
CVE-2026-41282
4.0 Medium
-
projectdiscovery nuclei
Nuclei Template Signature Verification Bypass
CVE-2024-43405
Fix available
7.4 High
-
projectdiscovery nuclei
Unsigned code template execution through workflows in projectdiscovery/nuclei
CVE-2024-40641
Fix available
7.4 High
-
projectdiscovery interactsh
ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties
CVE-2024-5262
Fix available
9.3 Critical
-
projectdiscovery nuclei
Unsigned code template execution through workflows in projectdiscovery/nuclei
CVE-2024-27920
Fix available
7.4 High
-
projectdiscovery nuclei
Nuclei Path Traversal vulnerability
CVE-2023-37896
Fix available
7.5 High
-
projectdiscovery interactsh
Interactsh server settings make users vulnerable to Subdomain Takeover
CVE-2023-36474
Fix available
8.2 High