Projectdiscovery

9 CVEs across 2 Projectdiscovery products. Browse Projectdiscovery vulnerabilities, severities, and proof-of-concept exploits.

Projectdiscovery products with known CVEs

ProductCVEs
Nuclei7
Interactsh2
Projectdiscovery CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-41646Medium5.52026-05-08Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's JavaScript protocol…
CVE-2026-41645Medium5.32026-05-08Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's expression evaluati…
CVE-2026-41282Medium4.02026-04-20ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not t…
CVE-2024-43405High7.42024-09-04Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2, a vulnerability in Nuclei's template s…
CVE-2024-40641High7.42024-07-17Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code o…
CVE-2024-5262Critical9.82024-06-05Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files…
CVE-2024-27920High7.42024-03-15projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuc…
CVE-2023-37896High7.52023-08-04Nuclei is a vulnerability scanner. Prior to version 2.9.9, a security issue in the Nuclei project affected users utilizing Nuclei as Go code (SDK) running cust…
CVE-2023-36474High8.22023-06-28Interactsh is an open-source tool for detecting out-of-band interactions. Domains configured with interactsh server prior to version 1.0.0 were vulnerable to s…