v10.4.8 v0.4.0
facebook/lexicalAug 24, 2026 → Aug 25, 20261 day between releases
What's New
Older release adds 112 security templates and 101 CVEs, while newer release upgrades Transformers dependency to 5.15 and improves demo account controls.
New Features
- Upgraded default Transformers library dependency to version 5.15
- Improved demo account entitlements and controls
- Added 112 new vulnerability templates for Metabase, Adobe Commerce, and JetBrains TeamCity
- Added 101 new CVEs targeting high-severity flaws
- Extended milvus-detect.yaml to fingerprint Milvus
Improvements
- Fixed false negatives in regex matchers for CVEs
- Fixed false positives for WAF block pages and benign Next.js redirects
- Severity audit raising 9 info-level templates based on CVE/CWE
- Refactored Argo CD and Airflow templates
- Added response-validity error checks to snmpv3-detect
Bug Fixes
- Fixed false negatives in CVE-2027-5521 and CVE-2027-7615
- Fixed false positives for WAF block pages and benign Next.js redirects
- Fixed false negatives in regex matchers
Upgrade Notes
The provided notes describe two different projects (a security scanner and a TTS library), so there is no upgrade path between them. If upgrading the TTS library, verify compatibility with the new Transformers 5.15 dependency.
The Two Releases
Nuclei Templates v10.4.8 - Release Notes
Aug 24, 2026· 2 months ago
Adds 112 templates and 101 CVEs targeting high-severity flaws in CMS, DevOps, and enterprise software. Includes fixes for false negatives in regex matchers and false positives related to WAFs and benign redirects.
Full release notesv0.4.0
Aug 25, 2026· 2 months ago
This release focuses on improving the demo account management system and upgrading the underlying Transformers library dependency to version 5.15.
Full release notes