Repository navigation

Issues

New issue

What features would you want to see in nuclei?
#2542 · ehsandeep opened on Sep 2, 2022
Where does nuclei fit into your pipeline/use cases?
#2541 · ehsandeep opened on Sep 2, 2022
import already existing templates within a template
#4287 · iamnoooob opened on Oct 24, 2023
1

[BUG] Offline HTTP version normalization modifies response headers and bodies
projectdiscovery/nuclei#7921 · opened on Oct 24, 2026
Compiled-cache hits drop flow and multi-protocol options
projectdiscovery/nuclei#7915 · opened on Oct 23, 2026
JS redis calls retry a failed dial 5 times in the background and log each failure to stderr
projectdiscovery/nuclei#7911 · opened on Oct 22, 2026
JS redis calls buffer an unbounded reply from a port that streams without newlines
projectdiscovery/nuclei#7907 · opened on Oct 21, 2026
apply host backoff to javascript templates
projectdiscovery/nuclei#7894 · opened on Oct 19, 2026 · nuclei v4
[BUG] -stats percentage comes from an estimated request total and ends above or below 100%
projectdiscovery/nuclei#7860 · opened on Oct 11, 2026
Skip full HTTP response copy when operators do not read it
projectdiscovery/nuclei#7829 · opened on Oct 5, 2026
cut CI runtime
projectdiscovery/nuclei#7803 · opened on Sep 30, 2026 · nuclei v4
apply host backoff to non-http protocols
projectdiscovery/nuclei#7794 · opened on Sep 28, 2026 · nuclei v4
auto-login for authenticated scans
projectdiscovery/nuclei#7788 · opened on Sep 28, 2026 · nuclei v4
[BUG] OpenAPI input panics on an application/xml request body without an object schema
projectdiscovery/nuclei#7785 · opened on Sep 27, 2026
[BUG] JS mysql.ConnectWithDSN bypasses -restrict-local-network-access network policy via raw DSN dialer
projectdiscovery/nuclei#7767 · opened on Sep 22, 2026
Headless templates download full Chromium on Linux
projectdiscovery/nuclei#7738 · opened on Sep 14, 2026 · nuclei v4
[BUG] SDK: .nuclei-ignore is read before the installer creates it, so the first engine runs with an empty deny-list
projectdiscovery/nuclei#7704 · opened on Sep 4, 2026
2
[BUG] ThreadSafeNucleiEngine: live heap scales with concurrent ExecuteNucleiWithOptsCtx calls (compiled template store rebuilt per call, DoNotCache)
projectdiscovery/nuclei#7686 · opened on Sep 1, 2026 · nuclei v4
1
http: expose negotiated TLS key exchange in DSL metadata
projectdiscovery/nuclei#7665 · opened on Aug 17, 2026
[BUG] Nuclei template signature bypass: mtime-only metadata cache runs unsigned code templates
projectdiscovery/nuclei#7663 · opened on Aug 17, 2026
2
[BUG] Fatal runtime fault (access violation 0xc0000005) crashes nuclei daily during concurrent scans on Windows Server 2025
projectdiscovery/nuclei#7630 · opened on Jul 31, 2026
1
Evaluate DSL helper expressions in -H header values per request
projectdiscovery/nuclei#7617 · opened on Jul 27, 2026
1
[BUG] regex extractor group beyond the pattern capture count silently extracts nothing
projectdiscovery/nuclei#7611 · opened on Jul 26, 2026
Add katana input
projectdiscovery/nuclei#7548 · opened on Jul 15, 2026
[BUG] httpx Request statistics
projectdiscovery/nuclei#7543 · opened on Jul 14, 2026
2
Add local HTTP(S) callback listener mode for offline/internal OAST detection
projectdiscovery/nuclei#7437 · opened on Jun 1, 2026
3
[RFC] Raw HTTP Response Body Access for Compressed Responses
projectdiscovery/nuclei#7387 · opened on May 10, 2026
4
[RFC] Template Target Resolution Consolidation
projectdiscovery/nuclei#7386 · opened on May 8, 2026
2