Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

james-yusuke/nuclei

              dev @ e32d0b6
            

Fixes

CVEs

HIGH

Peak severity

58.6%

Coverage

Highlights

Sandbox Escape: 7 prior fixes. Scrutinize any change in this area.

pkg/catalog/loader/loader.go: most-fixed (5 issues). Treat as high-risk during review.

25 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Multiple sandbox escapes were fixed across JS execution, file reads, payload loading, headless Chrome, and workflow scripts, indicating a systemic weakness in enforcing sandbox boundaries for template-driven code and file access.

Signature Bypass: Multiple signature verification bypasses were fixed, including cache poisoning, mid-file signatures, and unsigned JavaScript template execution, showing that template signing is a critical but fragile control.

SSRF: SSRF vulnerabilities in LDAP dialing and proxy validation show that network access from template code and proxy settings must be strictly allowlisted and validated.