---
id: 9335
title: "Nuclei v2.5.2 - First Security Release"
source_domain: projectdiscovery.io
source_url: "https://projectdiscovery.io/blog/nuclei-v2-5-2-release"
published_at: "2021-09-20T18:52:40Z"
tags: ["bug-bounty"]
phying_url: "https://phying.com/item/9335"
lang: en
---

# Nuclei v2.5.2 - First Security Release

## Summary

We'd like to thank @c3l3si4n for disclosing the first security vulnerability that affects nuclei. This blog describes a brief overview of the security issue/impact and the measures we took to address it. Issue Summary The nuclei engine has a code execution vulnerability using components with known vulnerabilities that can be exploited by utilizing a specially crafted headless based template. Root Cause Nuclei relies on the go-rod library for a high level browser driver to run templates tha

## Intelligence Metadata

- **Sources:** projectdiscovery.io
- **Published:** 2021-09-20T18:52:40Z
- **Original:** https://projectdiscovery.io/blog/nuclei-v2-5-2-release
- **Phying News:** https://phying.com/item/9335