CVE-2024-40641

Description

projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei

Affected packages (4)

• Go/github.com/projectdiscovery/nucleifrom 0
• Go/github.com/projectdiscovery/nuclei/v2from 0
• Go/github.com/projectdiscovery/nuclei/v3from 0, < 3.3.0
• Go/github.com/projectdiscovery/nuclei/v3from 0, < 3.3.0

CVSS scores

References (3)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-40641
• PATCHhttps://github.com/projectdiscovery/nuclei
• WEBhttps://github.com/projectdiscovery/nuclei/security/advisories/GHSA-c3q9-c27p-cw9h