Projectdiscovery Nuclei vulnerabilities

• projectdiscovery nuclei Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode CVE-2026-76805 Fix available 5.3 MediumSeptember 22, 2026
• projectdiscovery nuclei Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass CVE-2026-76802 Fix available 4.7 MediumSeptember 22, 2026
• projectdiscovery nuclei Nuclei: Local File Read via Workflow File-Protocol Gate Bypass CVE-2026-76804 Fix available 5.5 MediumSeptember 22, 2026
• projectdiscovery nuclei Nuclei: Local File Read via MySQL Client Sandbox Bypass CVE-2026-76803 Fix available 5.3 MediumSeptember 22, 2026
• projectdiscovery nuclei Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache CVE-2026-92718 7.0 HighSeptember 16, 2026
• projectdiscovery nuclei Nuclei: Local File Read via require() Module Loader Bypass CVE-2026-41646 Fix available 5.5 MediumApril 22, 2026
• projectdiscovery nuclei Nuclei: Environment variable disclosure via Response-Derived DSL Expressions CVE-2026-41645 Fix available 5.3 MediumApril 20, 2026
• projectdiscovery nuclei ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env... CVE-2026-41282 4.0 MediumApril 20, 2026
• projectdiscovery nuclei Nuclei Template Signature Verification Bypass CVE-2024-43405 Fix available 7.4 HighSeptember 4, 2024
• projectdiscovery nuclei Unsigned code template execution through workflows in projectdiscovery/nuclei CVE-2024-40641 Fix available 7.4 HighJuly 17, 2024
• projectdiscovery nuclei Unsigned code template execution through workflows in projectdiscovery/nuclei CVE-2024-27920 Fix available 7.4 HighMarch 15, 2024
• projectdiscovery nuclei Nuclei Path Traversal vulnerability CVE-2023-37896 Fix available 7.5 HighAugust 4, 2023