Go/github.com/projectdiscovery/nuclei CVE-2026-76819: unknown

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability in github.com/projectdiscovery/nuclei

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6575
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-vxg7-f2jj-jmqm
• https://nvd.nist.gov/vuln/detail/CVE-2026-76819
• https://github.com/projectdiscovery/nuclei/commit/1fe6025b966cbb95ed4d9f40abfb629b6cbd27b2
• https://github.com/projectdiscovery/nuclei/pull/7467
• https://github.com/projectdiscovery/nuclei/pull/7514
• https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0

CVE-2026-76819 · published 2026-10-01T20:23:38Z · modified 2026-10-01T20:45:14.083655262Z · JSON