VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/projectdiscovery/nuclei: vulnerability history, versions and safety

github.com/projectdiscovery/nuclei is a package in the Go ecosystem. Vulert records 10 vulnerabilities for it across 120 releases, from Jun 2024 to Oct 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
10 vulnerabilities recorded U10
i
10 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
7 in the last 12 months

Most recent disclosure 01 Oct 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/projectdiscovery/nuclei vulnerabilities

Vulert verdict on github.com/projectdiscovery/nuclei v1.1.7 i

Updated on 23 Oct 2026

Careful: 10 of the 10 vulnerabilities Vulert records for this package have no fix yet. Plan around those, or apply the workaround listed for each.

Package health score 64/100
  • Security Unfixed issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Plan around the 10 vulnerabilities with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.1.7 — unaffected i
  • Vulnerabilities on record 10 over 2 years · 7 in the last year i
  • Latest disclosure 01 Oct 2026 i
  • Highest CVSS n/a i
  • With no published fix 10 i
  • Stars 32,074 i
  • OpenSSF scorecard 5/10 i
  • Last release 36 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/projectdiscovery/nuclei, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.1.8-0.20231016154330-a6384c56f93b 16 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231016093601-3276703244ad 16 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231013161228-62cd4ddeafcf 13 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231013062831-d051332d53ed 13 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231011140312-2248c6378898 11 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231010103746-0596ab3cebf9 10 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231009070608-74a24ba766f9 09 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231003103021-62915a79a838 03 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231002193029-ae0da1a9f2d3 02 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231002164400-09ba28623e11 02 Oct 2023 U10 MIT No Details →
v1.1.8-0.20231002064406-85e73676bf26 02 Oct 2023 U10 MIT No Details →
v1.1.8-0.20230927110323-28b2780fd189 27 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230926112525-39d094075b40 26 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230925172512-0137a40a3515 25 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230920154723-54b5e0eea4fc 20 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230919184023-c952c57f84b2 19 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230918183132-c377221a78de 18 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230918103744-bafde6c63367 18 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230918061506-009e3811bb59 18 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230916153303-7c95c8faac71 16 Sep 2023 U10 MIT No Details →
v2.9.15+incompatible 16 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230916153004-45cd9615571c 16 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230916103217-4f93520e477e 16 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230915215648-72c53c4f2e57 15 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230915193444-c9d753d8637f 15 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230914165349-e3125e5a283a 14 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230914125840-2d175da0d554 14 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230911230651-b77ad93b9eb2 11 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230911064021-bc7db817b090 11 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230908161636-7a7a2958f586 08 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230906181134-643e9034cf47 06 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230904103151-9a37c92c75f6 04 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230904094155-529f076b48f5 04 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230904091702-ad015823c1fb 04 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230903063403-9364bec8d9b3 03 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230901181055-680fc5574b0f 01 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230901074750-d199c3691951 01 Sep 2023 U10 MIT No Details →
v1.1.8-0.20230829081733-388c1e8c398c 29 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230829054223-79c2175e6f25 29 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230828122319-b3a76527d8ce 28 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230828065856-494dacc67183 28 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230826203418-d8a051da2101 26 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230826082624-0c6f6c5fabee 26 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230826082529-6d9d17cea26e 26 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230825210345-592a8a2fd54c 25 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230825130046-d3928e080d81 25 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230823125253-e146c8993097 23 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230823121235-2b4ddd71e6fb 23 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230822135247-9bec2845c7df 22 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230822111640-c7ec63874877 22 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230822095839-fd2ae8de0036 22 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230821155010-576fa0c89156 21 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230821082600-fd76914b9d4d 21 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230818210751-36af9417bc05 18 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230818084710-a3b1f11d4ad9 18 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230817195143-1ade5a082446 17 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230817173515-1ee108ed13f2 17 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230814150902-d07c273ab437 14 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230814070337-79befbb29310 14 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230814062122-cf45b440d636 14 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230813125231-b789868f26dc 13 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230811191523-e50cfd64f7f1 11 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230811140043-deb351c2350f 11 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230810175827-e43e0cf186c8 10 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230807183834-b2916c1348d0 07 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230807060319-080e4dfb23a4 07 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230805161840-edd96f9ac4a4 05 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230803192632-c8a7df98f377 03 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230802122858-bd9e75d9bd7d 02 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230801191742-0776b2e237f8 01 Aug 2023 U10 MIT No Details →
v1.1.8-0.20230731104559-90a126ca1d3a 31 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230731062958-a794cbdb0b3b 31 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230728181839-03bdd24fb921 28 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230728161309-3894d466ada5 28 Jul 2023 U10 MIT No Details →
v2.9.10+incompatible 28 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230728155057-163bc22281f8 28 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230725172634-d40ecc5b625d 25 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230724145028-5074722f17e5 24 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230723131232-ae667a52d228 23 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230721225143-1635a2f58afd 21 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230721224952-ac51b571aeb7 21 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230717220438-53bcc18ec725 17 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230717215439-0828339de6c1 17 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230717194518-729424d0dfbd 17 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230714155412-66f0dc735ce9 14 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230713192900-78ed483af015 13 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230713132544-2cf574a9ba92 13 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230712192106-d51e058791db 12 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230712000020-4d1c9fe8b1d5 12 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230711234939-feeeaf3c0254 11 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230708195301-0993ac4cbbf7 08 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230707180532-28f6c3797415 07 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230707150034-492167340c78 07 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230707000914-5e284879d3f5 07 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230706120824-305ac6a1439f 06 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230706093135-b64d422b678e 06 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230704203756-b3ccb9a6e579 04 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230704133413-1eb4c7c80c17 04 Jul 2023 U10 MIT No Details →
v0.0.0-20230703131225-bb98eced070f 03 Jul 2023 U10 MIT No Details →
v1.1.8-0.20230703131225-bb98eced070f 03 Jul 2023 U10 MIT No Details →
v2.9.8+incompatible 03 Jul 2023 U10 — No Details →
v1.1.8-0.20230703125401-daecd169c543 03 Jul 2023 U10 — No Details →
v1.1.8-0.20230630180200-6707bc777a92 30 Jun 2023 U10 — No Details →
v1.1.8-0.20230628083348-060206ef6805 28 Jun 2023 U10 — No Details →
v1.1.8-0.20230627162956-c9edfdd4e9c7 27 Jun 2023 U10 — No Details →
v1.1.8-0.20230626193433-238ed0e9aabe 26 Jun 2023 U10 — No Details →
v2.9.7+incompatible 26 Jun 2023 U10 — No Details →
v1.1.8-0.20230626193211-c851a6f3e1c3 26 Jun 2023 U10 — No Details →
v1.1.8-0.20230626121512-fa199ed3b381 26 Jun 2023 U10 — No Details →
v1.1.8-0.20230622134859-16dd615f11f1 22 Jun 2023 U10 — No Details →
v1.1.8-0.20230622112732-442fc0f0600d 22 Jun 2023 U10 — No Details →
v1.1.8-0.20230622080448-ccf0d640c6ea 22 Jun 2023 U10 — No Details →
v1.1.8-0.20230621131940-936256460bf5 21 Jun 2023 U10 — No Details →
v1.1.8-0.20230619195522-0c8ec5e53585 19 Jun 2023 U10 — No Details →
v1.1.8-0.20230619104000-a872864330d3 19 Jun 2023 U10 — No Details →
v1.1.8-0.20230619074446-dd070dcd7a5f 19 Jun 2023 U10 — No Details →
v1.1.8-0.20230615134847-6e1220cc915f 15 Jun 2023 U10 — No Details →
v1.1.8-0.20230614081740-00c646149b39 14 Jun 2023 U10 — No Details →
v1.1.8-0.20230612102312-caedc8afaffc 12 Jun 2023 U10 — No Details →
v1.1.8-0.20230609093303-a4ca2021cdfd 09 Jun 2023 U10 — No Details →

The newest 120 of 772 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 3
  • 2026 7

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 7 of the 10 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/projectdiscovery/nuclei

The 5 most severe of 10 vulnerabilities recorded for this package

Search all 10 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-27920: Unsigned Code Template Execution in github.com/projectdiscovery/nuclei/v3 N/A unrated No fix published 04 Jun 2024
CVE-2024-40641: Unsigned Code Template Execution in projectdiscovery/nuclei N/A unrated No fix published 22 Jul 2024
CVE-2024-43405: Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei N/A unrated No fix published 06 Sep 2024
CVE-2026-41646: Local File Read Vulnerability in github.com/projectdiscovery/nuclei N/A unrated No fix published 20 May 2026
CVE-2026-41645: Nuclei Package Environment Variable Disclosure Vulnerability N/A unrated No fix published 25 Jun 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/projectdiscovery/nuclei

Is github.com/projectdiscovery/nuclei safe to use?

Vulert records 10 vulnerabilities for github.com/projectdiscovery/nuclei in Go: 0 critical, 0 high, 0 medium and 0 low, plus 10 not yet rated. 10 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/projectdiscovery/nuclei's Vulert package health score?

Vulert scores github.com/projectdiscovery/nuclei 64/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/projectdiscovery/nuclei should I use?

v1.1.7 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/projectdiscovery/nuclei have?

10 vulnerabilities are recorded for github.com/projectdiscovery/nuclei in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low, plus 10 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/projectdiscovery/nuclei vulnerabilities disclosed?

7 vulnerabilities were recorded for github.com/projectdiscovery/nuclei in the last 12 months, and the oldest entry in this database dates to 04 Jun 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/projectdiscovery/nuclei are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/projectdiscovery/nuclei for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/projectdiscovery/nuclei version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.