v2.14.0

projectdiscovery/subfinderv2.14.0Apr 27, 2026by dwisiswant0

AI Summary

Removes the Facebook source due to API discontinuation and introduces the Sub.md source with enhanced error handling and rate-limit fixes.

Key Highlights

  • Removed Facebook (Meta CT) source due to discontinued API
  • Added new Sub.md passive source
  • Fixed rate-limit handling for global and per-source limits
  • Improved transport error reporting across multiple sources

Breaking Changes

  • Removed Facebook (Meta CT) source due to discontinued API

New Features

  • Sub.md passive source
  • Enhanced rate-limit handling

Full Release Notes

## What's Changed

> [!WARNING]
> The Facebook source (Meta CT) has been removed in this release after Meta discontinued the upstream API.
>
> If you reference this source in automation, CI jobs, or saved source lists, remove it from those configurations.
> For most users, the practical impact should be low, since the integration was already non-functional, and this change mainly removes related errors and confusion.

### โœจ Features

- Added the new Sub.md passive source, plus follow-up hardening for non-200 responses and context-aware error delivery, by @x-stp in PR #1771 (ae1c9a6, 9ea2b18, d6282b0).

### ๐Ÿž Bug Fixes

- Fixed Netlas community-tier downloads by capping bulk size to 200 and tightening non-200 and body-close handling, by @x-stp in PR #1776 (7fc6da4, 3206a8b).
- Fixed control-flow bugs across Hackertarget, IntelX, Shodan, C99, and Chinaz, including better transport error reporting and safer response validation, by @x-stp in PR #1777 (14103b5, 75f3c28, 9760a96, 01569ae, b9ef679, c61d1e9).
- Fixed rate-limit handling so global and per-source limits work as expected, preserved per-source durations, and prevented nil map panics, by @CharlesWong in PR #1764 (c1ce78e, cca10d8, 240305b, cf0b801, 6f0e11e).

### โŒ Removed

- Removed the dead Facebook source after Meta discontinued the backing API, by @PontusLindblom in PR #1732 (4d9e078).

### ๐Ÿงน Chores

- Updated workflow dependencies, switched to org actions, and cleaned up workflow configuration, by @PontusLindblom in PRs #1733 and #1768 (0dfd80a, 7bd72ff, e6ed1e1).
- Refreshed Go dependencies, including grouped module bumps plus utls, circl, and grouped ProjectDiscovery dependency updates, by @dependabot in PRs #1716, #1746, #1751, #1769, #1774, #1783 (bb5a68a, 2636330, 8aa8653, 4de1dde, 2d58630, 0ed1b0b).

## New Contributors
* @CharlesWong made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1764

**Full Changelog**: https://github.com/projectdiscovery/subfinder/compare/v2.13.0...v2.14.0