Starstruk Logo MarkStarstruk

v1.14.0

projectdiscovery/nuclei-templatesv1.14.0Jan 8, 2026by github-actions[bot]

AI Summary

This release focuses on security hardening and operational reliability, introducing a regex length limit to prevent resource exhaustion and updating multiple plugins to improve error handling and metrics tracking.

Key Highlights

  • Added regex length limit to reduce resource-exhaustion risks
  • Enhanced error consolidation with optional `show_first` flag
  • Improved Kubernetes API rate limiting
  • Fixed misleading SOA parser warnings in the file plugin
  • Implemented plugin chain tracking in metrics

New Features

  • Fixed gosec G115 integer overflow warnings
  • Plugin updates for azure, sign, errors, file, and kubernetes
  • Enhanced metrics with plugin chain tracking

Full Release Notes

This release focuses on security hardening and operational reliability. Core updates
introduce a regex length limit to reduce resource-exhaustion risk. Plugin updates
improve error consolidation (`show_first`), reduce misleading SOA warnings, add
Kubernetes API rate limiting, enhance metrics with plugin chain tracking, and fix
issues in azure and sign. This release also includes additional security fixes;
see the security advisory for details.

## Brought to You By

cangming
pasteley
Raisa Kabir
Ross Golder
rusttech
Syed Azeez
Ville Vesilehto
Yong Tang

## Noteworthy Changes

* core: Fix gosec G115 integer overflow warnings (https://github.com/coredns/coredns/pull/7799)
* core: Add regex length limit (https://github.com/coredns/coredns/pull/7802)
* plugin/azure: Fix slice init length (https://github.com/coredns/coredns/pull/6901)
* plugin/errors: Add optional `show_first` flag to consolidate directive (https://github.com/coredns/coredns/pull/7703)
* plugin/file: Fix for misleading SOA parser warnings (https://github.com/coredns/coredns/pull/7774)
* plugin/kubernetes: Rate limits to api server (https://github.com/coredns/coredns/pull/7771)
* plugin/metrics: Implement plugin chain tracking (https://github.com/coredns/coredns/pull/7791)
* plugin/sign: Report parser err before missing SOA (https://github.com/coredns/coredns/pull/7775)