Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

steelburn/nuclei

              dev @ 764f5a9
            

Fixes

CVEs

CRITICAL

Peak severity

45.0%

Coverage

Highlights

Sandbox Escape: 6 prior fixes. Scrutinize any change in this area.

pkg/js/libs/ldap/ldap.go: most-fixed (2 issues). Treat as high-risk during review.

23 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Multiple fixes address escapes from the JS sandbox and headless browser sandbox, indicating a persistent weakness in enforcing file access and module restrictions.

Code Execution: Code templates and JavaScript execution are gated by signature verification and opt-in flags, but bypasses have occurred in workflow sub-loaders and unsigned templates.

SSRF: SSRF risks arise from dialing restricted hosts and bypassing proxy settings; fixes enforce host allowlists and proxy configuration across multiple protocols.