nuclei-templates Releases

This release adds 112 new templates and 101 CVEs, featuring critical vulnerabilities such as Metabase SQL Injection, Adobe Commerce Identity Switch, and JetBrains TeamCity RCE.

Aug 24, 2026

Released with 122 new templates and 49 CVEs, focusing on WordPress vulnerabilities like Batch-Route Confusion and critical RCEs in Gitea and Flowise.

Aug 3, 2026

This release focuses on stability improvements and documentation updates for the resume builder. Key changes include a crash fix for margin inputs and the introduction of semantic CSS stylesheets.

Jul 30, 2026

This release introduces a new application timeline feature and enhances the resume builder with AI model editing and LinkedIn auto-fill capabilities. It also addresses various PDF layout issues and improves API performance.

Jul 28, 2026

Added 74 new templates and 23 CVEs, including critical vulnerabilities in ColdFusion, phpBB, and vLLM. The release also includes fixes for matcher types, false negatives/positives, and the removal of obsolete templates.

Jul 16, 2026

Disabled the default bwrap ffmpeg sandbox and introduced a new 'shadowing' feature to fully unmap volumes using the `//NULL` filesystem path.

Jul 9, 2026

This release expands AI provider support and improves cover-letter exports by removing default resume headers. It also enhances security with stricter headers and limits bulk operations to prevent oversized requests.

Jul 8, 2026

This release brings full REST and MCP parity to the Application Tracker, allowing agents to manage job applications programmatically. It adds comprehensive MCP tools for all application workflows and updates documentation for these new capabilities.

Jul 7, 2026

Fixed a critical security vulnerability related to dirkeys and introduced CSP nonces to defend against XSS. Also refactored the SMB shares enumeration script.

Jul 6, 2026

This release introduces a new Application Tracking feature with dashboard views and insights, along with an Application Copilot for resume matching and cover letter drafting. It also adds Markdown export support and a dedicated dialog for cleaner resume and cover-letter downloads.

Jul 5, 2026

A patch release focused on fixing devtools and query-devtools issues, including window styling, pip context resets, and build output corrections.

Jun 27, 2026

Patch release updating core dependencies to version 5.101.2.

Jun 27, 2026

Patch release updating devtools and core dependencies to version 5.101.2 and 6.1.36 respectively.

Jun 27, 2026

Patch release updating core dependencies to version 5.101.2.

Jun 27, 2026

Patch release updating persist and core dependencies to version 5.101.2.

Jun 27, 2026

This release adds 86 new templates and 64 CVEs, focusing heavily on critical vulnerabilities in enterprise software, Linux kernels, and popular CMS platforms. Significant updates include fixes for authentication bypasses in VPNs, supply chain backdoors in WordPress plugins, and Linux kernel privilege escalations.

Jun 23, 2026

Fix release addressing client connection errors, tooltip focus issues, and tooltip closing logic.

Jun 22, 2026

Feature release introducing HTML wallpapers, TWm animations, and performance optimizations.

Jun 22, 2026

This release bundles fixes from v1.9.71 and v1.9.72, primarily addressing critical stability issues in non-UTF-8 locales and optimizing configuration management. It introduces new configuration options for local-first conductors and session ordering, alongside various UI and session management refinements.

Jun 21, 2026

This release focuses on enhancing Cursor integration and session management, adding hook-based status notifications and the ability to restart live sessions. It also improves headless web deployment compatibility and updates project dependencies.

Jun 16, 2026