Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-41282
4
MEDIUMCVSS v3
Published
April 20, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration).
projectdiscovery/nuclei
GitHubNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
GitHubNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.>= 3.0.0, < 3.8.0NVD