nuclei · Issues· 106 open

smb-anonymous-access can never match, and the obvious fix makes it a false positive on any guest-mapping server

[BUG] Invalid XPath extractor expressions compile successfully and are silently skipped

[BUG] zstd response decoder is never closed: goroutine/memory leak on large `Content-Encoding: zstd` responses

[BUG] json-export silently drops findings: dedupe hash omits port

[FEATURE] interpolate variables in llm matcher/extractor prompts

[FEATURE] llm matchers and extractors on non-http protocols

[FEATURE] llm matcher: inputs for multi-response semantic diff

Headless templates download full Chromium on Linux

[FEATURE] semantic matchers: type: llm matchers and extractors

[BUG] SDK: .nuclei-ignore is read before the installer creates it, so the first engine runs with an empty deny-list

[BUG] ThreadSafeNucleiEngine: live heap scales with concurrent ExecuteNucleiWithOptsCtx calls (compiled template store rebuilt per call, DoNotCache)

[RFC] Template Target Resolution Consolidation

Evaluate DSL helper expressions in -H header values per request

[BUG] Nuclei template signature bypass: mtime-only metadata cache runs unsigned code templates

http: expose negotiated TLS key exchange in DSL metadata