v7.5.4 v10.4.7
high risk
facebook/lexicalJul 31, 2026 → Aug 3, 20263 days between releases
What's New
Switched from Asterisk Voice Agent to security templates with 122 new CVEs and vulnerability fixes.
New Features
- Added 122 new vulnerability templates and 49 CVEs.
- Added body fuzzing and POST/PUT method support to DAST templates.
- Refactored airflow-detect.yaml with /openapi.json check.
- Converted geovision templates to CVE-2021-47795.
- Added capture groups to regex extractors in multiple templates.
Improvements
- Improved MongoDB detection performance by switching from OP_QUERY to OP_MSG.
- Improved CVE-2026-63030 detection with safe route-confusion handling.
- Refactored airflow detection logic for better reliability.
Bug Fixes
- Fixed MongoDB detection by switching protocol from OP_QUERY to OP_MSG.
Upgrade Notes
The project scope appears to have shifted from an Asterisk Voice Agent to a vulnerability detection tool. No upgrade path exists between these versions.
The Two Releases
v7.5.4
v7.5.4
Jul 31, 2026· 3 months ago
Release of the Asterisk AI Voice Agent providing pre-built CLI tools and binaries for multiple operating systems and architectures.
Full release notesv10.4.7
Nuclei Templates v10.4.7 - Release Notes
Aug 3, 2026· 3 months ago
Adds 122 templates and 49 CVEs addressing critical issues in WordPress plugins, Gitea, and enterprise tools. Features performance improvements in MongoDB detection and refactoring of airflow detection.
Full release notes