All issues

Search results

[BUG] SDK: .nuclei-ignore is read before the installer creates it, so the first engine runs with an empty deny-list

Status: Open.

#7704 In projectdiscovery/nuclei;

· G360-Niek opened on Sep 4, 2026

[BUG] ThreadSafeNucleiEngine: live heap scales with concurrent ExecuteNucleiWithOptsCtx calls (compiled template store rebuilt per call, DoNotCache)

Status: Open.

#7686 In projectdiscovery/nuclei;

· G360-Niek opened on Sep 1, 2026

http: expose negotiated TLS key exchange in DSL metadata

Status: Open.

#7665 In projectdiscovery/nuclei;

· AAH20 opened on Aug 17, 2026

[BUG] Nuclei template signature bypass: mtime-only metadata cache runs unsigned code templates

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7663 In projectdiscovery/nuclei;

· geo-chen opened on Aug 17, 2026

-lfa (allow-local-file-access) is a process-wide switch that grants every template — including remote URL templates — arbitrary local file reads

Status: Open.

#7638 In projectdiscovery/nuclei;

· zmf963 opened on Aug 6, 2026

[BUG] Fatal runtime fault (access violation 0xc0000005) crashes nuclei daily during concurrent scans on Windows Server 2025

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7630 In projectdiscovery/nuclei;

· adarkin-bp opened on Jul 31, 2026

Evaluate DSL helper expressions in -H header values per request

Status: Open.

#7617 In projectdiscovery/nuclei;

· aviadavi opened on Jul 27, 2026

[BUG] regex extractor group beyond the pattern capture count silently extracts nothing

Status: Open.

#7611 In projectdiscovery/nuclei;

· DPS0340 opened on Jul 26, 2026

Track exact-basename matching for known template configuration files

Status: Open.

#7610 In projectdiscovery/nuclei;

· coderabbitai opened on Jul 26, 2026

[BUG] Matchers/extractors with no values compile and run, silently never matching

Status: Open.

#7604 In projectdiscovery/nuclei;

· DPS0340 opened on Jul 26, 2026

Add katana input

Status: Open.

#7548 In projectdiscovery/nuclei;

· Mzack9999 opened on Jul 15, 2026

[BUG] httpx Request statistics

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7543 In projectdiscovery/nuclei;

· luggesexe opened on Jul 14, 2026