CVE ID :CVE-2026-41282
Published : April 20, 2026, 7:10 a.m. | 37 minutes ago
Description :ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration).
Severity: 4.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-41282 - ProjectDiscovery Nuclei DSL Expression Injection Vulnerability
CVE ID :CVE-2026-41282 Published : April 20, 2026, 7:10 a.m. | 37 minutes ago Description :ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration). Severity: 4.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...