v0.11.0 v10.4.9
projectdiscovery/nuclei-templatesSep 16, 2026 → Sep 16, 20260 days between releases
What's New
Adds 123 new templates and 85 CVEs; removes 6 unreliable templates and fixes detection accuracy.
Breaking Changes
- Removed six unreliable CVE templates
New Features
- New templates for critical CVEs (N-able, GitLab, JFrog Artifactory, GiveWP)
- Enhanced detection for Ruby on Rails LFI and Grafana using improved DSL matchers
- Rewrote AI/ML exposure templates to use raw requests and proper metadata
Improvements
- Tag reclassifications across 100 templates for better organization
- Improved detection accuracy by fixing false negatives
- Addressed false positives for Next.js and hp-printer to reduce noise
Bug Fixes
- Restored detection for Ruby on Rails Local File Inclusion and Grafana behind reverse proxies
- Fixed false positives for Next.js i18n middleware and hp-printer-default-login
Upgrade Notes
Users relying on the six removed CVE templates should update their scan configurations. Detection accuracy improvements may alter results for Ruby on Rails and Grafana targets.
The Two Releases
v0.11.0
Sep 16, 2026· 1 month ago
This version reworks the Playground UI with a liquid composer and voice dictation, while folding the Providers page into the Keys page and improving routing logic for stale models.
Full release notesNuclei Templates v10.4.9 - Release Notes
Sep 16, 2026· 1 month ago
This release adds 123 new templates and 85 CVEs, featuring critical vulnerabilities in enterprise software such as GitLab, JFrog Artifactory, and GiveWP. It also includes significant improvements to detection accuracy by fixing false positives for tools like Next.js and hp-printer, alongside tag reclassifications.
Full release notes