Starstruk Logo MarkStarstruk

v2.17.0

projectdiscovery/subfinderv2.17.0Oct 8, 2026by dogancanbakir

Upgrading?

What changed from v2026.10.0 → v2.17.0?

AI Summary

This release introduces new passive sources including CRTname and SubdomainCenter, adds regex-based filtering options, and fixes various bugs including CVEs, response body leaks, and data races.

Key Highlights

  • Added bounded concurrent domain enumeration.
  • Added CRTname and SubdomainCenter passive sources.
  • Added `-match-regex` and `-filter-regex` options for filtering results.
  • Fixed HIGH CVEs by bumping golang.org/x/net and golang.org/x/text.

New Features

  • Bounded concurrent domain enumeration.
  • CRTname passive source.
  • SubdomainCenter passive source.
  • `-match-regex` and `-filter-regex` options.

Full Release Notes

## What's Changed

### 🎉 New Features
* Added bounded concurrent domain enumeration by @dwisiswant0 in https://github.com/projectdiscovery/subfinder/pull/1870
* Added crtname passive source by @melvinsh in https://github.com/projectdiscovery/subfinder/pull/1838
* Added subdomaincenter passive source by @g147 in https://github.com/projectdiscovery/subfinder/pull/1865
* Added Options `-match-regex` and `-filter-regex` to filter results with regular expressions by @root-Manas in https://github.com/projectdiscovery/subfinder/pull/1956

### 🐞 Bug Fixes
* Fixed HIGH CVEs by bumping golang.org/x/net and golang.org/x/text by @dwisiswant0 in https://github.com/projectdiscovery/subfinder/pull/1942
* Fixed response body leaks on error responses and unbounded GitHub rate-limit retries by @CalvinTjoaquinn in https://github.com/projectdiscovery/subfinder/pull/1957
* Fixed dropped subdomains reported with uppercase letters or a trailing dot by @krishna28238-arch in https://github.com/projectdiscovery/subfinder/pull/1863
* Fixed ZoomEye source by switching to the v2 search API by @dwisiswant0 in https://github.com/projectdiscovery/subfinder/pull/1944
* Fixed data races between concurrent source runs by @dwisiswant0 in https://github.com/projectdiscovery/subfinder/pull/1953
* Fixed scanmalware statistics races between concurrent runs by @dwisiswant0 in https://github.com/projectdiscovery/subfinder/pull/1949
* Fixed HTTP connection reuse by @dwisiswant0 in https://github.com/projectdiscovery/subfinder/pull/1873

### Other Changes
* Moved Docker image publishing into the GoReleaser release workflow by @dwisiswant0 in https://github.com/projectdiscovery/subfinder/pull/1965
* Fixed processItems helper name in GitHub source by @daixiheguu in https://github.com/projectdiscovery/subfinder/pull/1841


## New Contributors
* @daixiheguu made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1841
* @melvinsh made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1838
* @krishna28238-arch made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1863
* @CalvinTjoaquinn made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1957
* @root-Manas made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1956
* @g147 made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1865

**Full Changelog**: https://github.com/projectdiscovery/subfinder/compare/v2.16.0...v2.17.0

Related Repositories

ollama/ollama★ 184,206

Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

fatedier/frp★ 110,051

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

asheshgoplani/agent-deck★ 102,148

Terminal session manager for AI coding agents. One TUI for Claude, Gemini, OpenCode, Codex, and more.

infiniflow/ragflow★ 92,612

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

gohugoio/hugo★ 90,198

The world’s fastest framework for building websites.