Affected by GO-2026-4965
and 6 other vulnerabilities
GO-2026-4965: Nuclei: Local File Read via require() Module Loader Bypass in github.com/projectdiscovery/nuclei
GO-2026-5473: Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei
GO-2026-6570: Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei
GO-2026-6571: Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei
GO-2026-6574: Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei
GO-2026-6575: Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei
GO-2026-6577: Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei
package
Version:
v3.4.8
Opens a new window with list of versions in this module.
Published: Aug 21, 2025
License: MIT
Opens a new window with license information.
Imports: 6
Opens a new window with list of imports.
Imported by: 6
Opens a new window with list of known importers.
Documentation
¶
HasTrailingSlash returns true if path(that has default variables) has trailing slash
SetHeader sets some headers only if the header wasn't supplied by the user
ShouldDisableKeepAlive depending on scan strategy
UpdateURLPortFromPayload overrides input port if specified in payload(ex: {{BaseURL}}:8080)
Source Files
¶
Click to show internal directories.
Click to hide internal directories.