v10.4.6 v1.17.0

medium risk

multimodal-art-projection/YuEJul 16, 2026 → Jul 21, 20265 days between releases

What's New

Introduces custom file processors and interactive config trust, shifting focus from security templates.

New Features

  • Custom File Processors to run external commands on files before packing
  • Interactive confirmation before trusting a remote repository's config
  • Per-file inclusion levels for MCP tools via outputPatterns parameter

Improvements

  • Fixed output splitting issues for repositories with oversized directories

Bug Fixes

  • Fixed output splitting issues for repositories with oversized directories

Upgrade Notes

You must configure the new `processors` array in your input JSON for file transformations. Additionally, verify remote repository configs manually as interactive confirmation is now required.

The Two Releases

v10.4.6

Nuclei Templates v10.4.6 - Release Notes

Jul 16, 2026· 3 months ago

Released 74 new templates covering 23 CVEs, featuring critical ColdFusion RDS write vulnerabilities, NVIDIA Triton auth bypass, and vLLM information disclosure. The update corrects template naming conventions and improves detection for GitHub Pages and Inertia.js.

Full release notes
v1.17.0

v1.17.0

Jul 21, 2026· 3 months ago

Introduces custom file processors for transforming content before packing, an interactive confirmation prompt before trusting remote repository configs, and per-file inclusion levels for MCP tools.

Full release notes