All issues

Search results

Handle corrupt and missing active .nuclei-ignore files explicitly

Status: Open.

Task

#7691 In projectdiscovery/nuclei;

· coderabbitai opened on Sep 2, 2026

[BUG] ThreadSafeNucleiEngine: live heap scales with concurrent ExecuteNucleiWithOptsCtx calls (compiled template store rebuilt per call, DoNotCache)

Status: Open.

#7686 In projectdiscovery/nuclei;

· G360-Niek opened on Sep 1, 2026

http: expose negotiated TLS key exchange in DSL metadata

Status: Open.

#7665 In projectdiscovery/nuclei;

· AAH20 opened on Aug 17, 2026

[BUG] Nuclei template signature bypass: mtime-only metadata cache runs unsigned code templates

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7663 In projectdiscovery/nuclei;

· geo-chen opened on Aug 17, 2026

[BUG] ...nuclei (Windows) [ERR] Could not parse nuclei-ignore file: yaml: line 59: mapping values are not allowed in this context

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7651 In projectdiscovery/nuclei;

· hkelley opened on Aug 10, 2026

[BUG] Dynamic Auth deadlock when login endpoint is on the same domain as scan target (sync.Once re-entry in PR #6976)

Status: Open.

#7639 In projectdiscovery/nuclei;

· sunny-days-365 opened on Aug 6, 2026

-lfa (allow-local-file-access) is a process-wide switch that grants every template — including remote URL templates — arbitrary local file reads

Status: Open.

#7638 In projectdiscovery/nuclei;

· zmf963 opened on Aug 6, 2026

[BUG] Fatal runtime fault (access violation 0xc0000005) crashes nuclei daily during concurrent scans on Windows Server 2025

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.Inconsistencies or issues which will cause an issue or problem for users or implementors.

Status: Open.

#7630 In projectdiscovery/nuclei;

· adarkin-bp opened on Jul 31, 2026

Evaluate DSL helper expressions in -H header values per request

Status: Open.

#7617 In projectdiscovery/nuclei;

· aviadavi opened on Jul 27, 2026

[BUG] regex extractor group beyond the pattern capture count silently extracts nothing

Status: Open.

#7611 In projectdiscovery/nuclei;

· DPS0340 opened on Jul 26, 2026

Track exact-basename matching for known template configuration files

Status: Open.

#7610 In projectdiscovery/nuclei;

· coderabbitai opened on Jul 26, 2026

[BUG] Matchers/extractors with no values compile and run, silently never matching

Status: Open.

#7604 In projectdiscovery/nuclei;

· DPS0340 opened on Jul 26, 2026