Starstruk Logo MarkStarstruk

v2.16.0

projectdiscovery/subfinderv2.16.0Aug 22, 2026by ehsandeep

AI Summary

This release introduces a new passive source for malware scanning and addresses critical bugs related to SQL timeouts, deprecated network calls, and response handling. It also improves source pagination logic and domain extraction accuracy.

Key Highlights

  • Added 'scanmalware' as a new passive source
  • Fixed SQL handshake rejection issues with crtsh and PgBouncer
  • Updated deprecated 'Dial' to 'DialContext' for better compatibility
  • Implemented strict literal matching for target domains in extractors
  • Added size limits for untrusted source response bodies to prevent crashes

New Features

  • Added scanmalware passive source
  • Honor -max-results flag across paginating sources

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at main -->

## What's Changed

* feat(sources): honor -max-results across paginating sources by @Gerijacki in https://github.com/projectdiscovery/subfinder/pull/1810
* fix(extractor): match the target domain literally and reject partial hosts by @Gerijacki in https://github.com/projectdiscovery/subfinder/pull/1811
* fix(subscraping): cap untrusted source response bodies with a size limit by @adamsjack711-ux in https://github.com/projectdiscovery/subfinder/pull/1809
* fix(subscraping): use DialContext instead of the deprecated Dial by @jonaslejon in https://github.com/projectdiscovery/subfinder/pull/1835
* feat: add scanmalware passive source by @jonaslejon in https://github.com/projectdiscovery/subfinder/pull/1834
* fix(crtsh): set statement_timeout via SQL query to avoid PgBouncer handshake rejection (#1828) by @gcoinstash-cmd in https://github.com/projectdiscovery/subfinder/pull/1832

## New Contributors
* @J12934 made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1823
* @adamsjack711-ux made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1809
* @gcoinstash-cmd made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1832

**Full Changelog**: https://github.com/projectdiscovery/subfinder/compare/v2.15.0...v2.16.0