Vulnerabilities
Report: CVE-2026-41282 - ProjectDiscovery Nuclei DSL Expression Injection Vulnerability - Analysis
CVE ID :CVE-2026-41282 Published : April 20, 2026, 8:16 a.m. | 34 minutes ago Description :ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration). Severity: 4.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...