Go/github.com/projectdiscovery/nuclei/v3 CVE-2026-76819: high 8.6

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

Action: Upgrade github.com/projectdiscovery/nuclei/v3 to 3.10.0 or later.

go get github.com/projectdiscovery/nuclei/v3@v3.10.0

Affected

Fixed versions

Sources

• osv: GHSA-vxg7-f2jj-jmqm
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-vxg7-f2jj-jmqm
• https://nvd.nist.gov/vuln/detail/CVE-2026-76819
• https://github.com/projectdiscovery/nuclei/pull/7467
• https://github.com/projectdiscovery/nuclei/pull/7514
• https://github.com/projectdiscovery/nuclei/commit/1fe6025b966cbb95ed4d9f40abfb629b6cbd27b2
• https://github.com/projectdiscovery/nuclei
• https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0

CVE-2026-76819 · published 2026-09-22T20:37:13Z · modified 2026-10-01T20:55:44.790779575Z · JSON