Go/github.com/projectdiscovery/nuclei/v3 CVE-2024-27920: unknown, EPSS 0.41%

Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei

Action: Upgrade github.com/projectdiscovery/nuclei/v3 to 3.2.0 or later.

go get github.com/projectdiscovery/nuclei/v3@v3.2.0

Affected

Fixed versions

Sources

• osv: GO-2024-2645#Go/github.com/projectdiscovery/nuclei/v3
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-w5wx-6g2r-r78q
• https://nvd.nist.gov/vuln/detail/CVE-2024-27920
• https://github.com/projectdiscovery/nuclei/commit/e86f38299765b82ad724fdb701557e0eaff3884d
• https://github.com/projectdiscovery/nuclei/pull/4822
• https://docs.projectdiscovery.io/templates/protocols/code
• https://docs.projectdiscovery.io/templates/reference/template-signing
• https://docs.projectdiscovery.io/templates/workflows/overview

CVE-2024-27920 · published 2024-06-04T15:19:21Z · modified 2026-03-03T04:54:55.914553Z · JSON