[ Vendor · 4 CVEs ]
projectdiscovery
CVEs affecting projectdiscovery published in the last 30 days, plus any projectdiscovery CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-76805 | 22 Sep 2026 | CVSS 5.3 | Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz ModeNuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can… | Fix |
| CVE-2026-76802 | 22 Sep 2026 | CVSS 4.7 | Nuclei: Arbitrary Command Execution via DAST Code Signature BypassNuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the… | Fix |
| CVE-2026-76804 | 22 Sep 2026 | CVSS 5.5 | Nuclei: Local File Read via Workflow File-Protocol Gate BypassNuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the… | Fix |
| CVE-2026-76803 | 22 Sep 2026 | CVSS 5.3 | Nuclei: Local File Read via MySQL Client Sandbox BypassNuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript library does not enforce the… | Fix |