Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

projectdiscovery/nuclei

              dev @ ccbfb12
            

Fixes

CVEs

HIGH

Peak severity

28.6%

Coverage

Highlights

Path Traversal: 7 prior fixes. Scrutinize any change in this area.

pkg/js/libs/ldap/ldap.go: most-fixed (2 issues). Treat as high-risk during review.

17 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Signature Bypass: Attackers can exploit discrepancies in parsing or signature extraction boundaries to inject and execute arbitrary custom code templates while appearing to be signed and verified. This directly circumvents core verification defenses.

Sandbox Escape: Unrestricted module maps and dynamic evaluation pools in workflow engines or script runtimes allow templates to break containment, execute system commands, or load local files beyond intended sandbox constraints.

Expression Language Injection: Evaluations of side-effectful helper functions or the improper handling of untrusted response-derived extractor data can result in second-pass DSL execution, leading to local variable disclosure or arbitrary command evaluation.