Junglewise Threat Intelligence
CVE-2026-41645: GO-2026-5473 - Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei
CVE-2026-41645 · Severity: low · CVSS 3.1 · Published 2026-06-25
Technologies: github.com/projectdiscovery/nuclei/v2 (Go), github.com/projectdiscovery/nuclei/v3 (Go), github.com/projectdiscovery/nuclei (Go). Vendors: Go.
Executive brief
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei
Affected products
- Go github.com/projectdiscovery/nuclei/v2
- Go github.com/projectdiscovery/nuclei/v3
- Go github.com/projectdiscovery/nuclei
CVE identifiers
- CVE-2026-41645
- CVE-2026-41282