-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Pull requests: projectdiscovery/nuclei
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore(deps): bump the modules group with 8 updates
Type: Maintenance
Updating phrasing or wording to make things clearer or removing ambiguity.
#7288
opened Mar 23, 2026 by
dependabot
bot
Loading…
fix: add nil check for opts in executeWithRuntime (#7248)
#7285
opened Mar 22, 2026 by
DrGalio
Loading…
fix(js): propagate proxy, timeout, and custom headers to JS templates
#7281
opened Mar 21, 2026 by
eyupcanakman
Loading…
fix(xss): strip all C0 control chars from URI schemes per WHATWG spec
#7280
opened Mar 20, 2026 by
mendarb
Loading…
2 of 3 tasks
refactor: replace Split in loops with more efficient SplitSeq
#7278
opened Mar 20, 2026 by
stringsbuilder
Loading…
2 of 4 tasks
Improve error message when template cannot be found
#7245
opened Mar 17, 2026 by
Coder39179
Loading…
fix: prevent concurrent map writes in MultiPartForm.Decode
#7240
opened Mar 16, 2026 by
VoidChecksum
Loading…
2 of 4 tasks
fix: use safe type assertions in HTTP operators to prevent panics
#7223
opened Mar 14, 2026 by
sandiyochristan
Loading…
5 tasks done
fix: prevent symlink following in file protocol scanning
#7222
opened Mar 14, 2026 by
sandiyochristan
Loading…
5 tasks done
fix: prevent path traversal in S3 custom template downloads
#7218
opened Mar 14, 2026 by
sandiyochristan
Loading…
5 tasks done
fix: prevent path traversal in markdown exporter
#7217
opened Mar 14, 2026 by
sandiyochristan
Loading…
5 tasks done
fix: replace MD5 with SHA-256 for template signer fragment
#7216
opened Mar 14, 2026 by
sandiyochristan
Loading…
5 tasks done
fix(fuzz): return fresh MultiPartForm instance to prevent concurrent map writes
#7138
opened Mar 6, 2026 by
usernametooshort
Loading…
fix(http): isolate project cache entries by URL scheme (http vs https)
#7137
opened Mar 6, 2026 by
usernametooshort
Loading…
fix(http): detect unresolved variables before encoding functions obscure them
#7135
opened Mar 6, 2026 by
usernametooshort
Loading…
fix(workflow): clone Input in subtemplate goroutine to prevent race condition
#7134
opened Mar 6, 2026 by
usernametooshort
Loading…
fix(expressions): skip evaluation when nested variables are unresolved inside helper functions
#7127
opened Mar 5, 2026 by
usernametooshort
Loading…
fix(fuzz): prevent fatal concurrent map-write crash in MultiPartForm when scanning multiple targets
#7126
opened Mar 5, 2026 by
usernametooshort
Loading…
fix(fuzz): propagate custom headers to time_delay analyzer follow-up requests
#7125
opened Mar 5, 2026 by
usernametooshort
Loading…
fix(http): host var scope across multi-request URLs
#7064
opened Feb 27, 2026 by
dwisiswant0
•
Draft
3 of 4 tasks
fix(fuzz): prevent concurrent map writes in MultiPartForm.Decode
#7029
opened Feb 25, 2026 by
yusei-wy
Loading…
3 of 5 tasks
fix: remove nil interface set in createEphemeralObjects to avoid panic
#6944
opened Feb 18, 2026 by
maxwolf8852
Loading…
4 tasks done
fix(js): prevent pool slot starvation under load
#6896
opened Feb 13, 2026 by
AuditeMarlow
Loading…
3 of 4 tasks
Previous Next
ProTip!
no:milestone will show everything without a milestone.