Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Fedora 44 Nuclei 3.11.0 Security Update - Cross-Site Scripting CVE Info

fedora
Calendar Grey July 21, 2026
Scroller Fedora
Nuclei 3.11.0 update for Fedora 44 addresses cross-site scripting and denial of service issues.
Update to 3.11.0

Summary

Nuclei is a fast, customizable vulnerability scanner powered by the global

security community and built on a simple YAML-based DSL, enabling collaboration

to tackle trending vulnerabilities on the internet. It helps you find

vulnerabilities in your applications, APIs, networks, DNS, and cloud

configurations.

Update Information:

Update to 3.11.0

Topics%20covered

Topics Covered

security advisory denial of service fedora cross site scripting important information disclosure

Change Log

* Mon Jul 13 2026 Emir Akdag - 3.11.0-1 - Update to 3.11.0 * Mon Apr 20 2026 Emir Akdag - 3.8.0-1 - Update to 3.8.0

References


[ 1 ] Bug #2458978 - CVE-2026-5160 nuclei: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2458978 [ 2 ] Bug #2458996 - CVE-2026-5160 nuclei: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2458996 [ 3 ] Bug #2459399 - nuclei-3.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2459399 [ 4 ] Bug #2476565 - CVE-2026-41646 nuclei: Nuclei: Information disclosure via JavaScript template local file access bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2476565 [ 5 ] Bug #2476566 - CVE-2026-41646 nuclei: Nuclei: Information disclosure via JavaScript template local file access bypass [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2476566 [ 6 ] Bug #2486214 - CVE-2026-45287 nuclei: OpenTelemetry-Go: ...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3a8abe43fb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: nuclei
Product: Fedora 44
Version: 3.11.0
Release: 1.fc44
URL: https://github.com/projectdiscovery/nuclei
Summary: Fast, customizable YAML-based vulnerability scanner

Topics%20covered

Topics Covered

security advisory denial of service fedora cross site scripting important information disclosure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.