Affected by GO-2026-6570 and 4 other vulnerabilities

GO-2026-6570: Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass in github.com/projectdiscovery/nuclei

GO-2026-6571: Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei

GO-2026-6574: Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei

GO-2026-6575: Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei

GO-2026-6577: Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei

httputil

package

v3.8.0 Latest Latest Go to latest Published: Apr 16, 2026 License: MIT Imports: 6 Imported by: 6

Details

This section is empty.

This section is empty.

func HasTrailingSlash(data string) bool

HasTrailingSlash returns true if path(that has default variables) has trailing slash

func SetHeader(req *retryablehttp.Request, name, value string)

SetHeader sets some headers only if the header wasn't supplied by the user

func ShouldDisableKeepAlive(options *types.Options) bool

ShouldDisableKeepAlive depending on scan strategy

func UpdateURLPortFromPayload(parsed *urlutil.URL, data string) (*urlutil.URL, string)

UpdateURLPortFromPayload overrides input port if specified in payload(ex: {{BaseURL}}:8080)

This section is empty.