All issues

Search results

--exclude-ports silently ignored for modules using nettacker_fuzzer.data.ports (affects 84+ modules)

Status: Open.

#1673 In OWASP/Nettacker;

· NSK-394 opened on Aug 16, 2026

[Module-request] CVE-2026-72898 (SQLi in Metabase)

Status: Open.

#1666 In OWASP/Nettacker;

· Franc-Zar opened on Aug 15, 2026

Add detection module for CVE-2026-20253 (Splunk Enterprise unauthenticated auth-bypass, CISA KEV)

Status: Open.

#1664 In OWASP/Nettacker;

· NSK-394 opened on Aug 15, 2026

HTTP engine has no partial-content/timeout handling for streaming (chunked/SSE) responses

Status: Open.

#1658 In OWASP/Nettacker;

· NSK-394 opened on Aug 8, 2026

[Module-request] CVE-2026-9198 (RCE in Langflow)

Status: Open.

#1656 In OWASP/Nettacker;

· Franc-Zar opened on Aug 7, 2026

TemplateLoader.parse() overwrites per-step timeout with global CLI --timeout value

duplicate

Status: Open.

#1654 In OWASP/Nettacker;

· NSK-394 opened on Aug 7, 2026

eval/exec on module YAML content in dependent-value resolution

Status: Open.

#1651 In OWASP/Nettacker;

· harshvardhan60792 opened on Aug 5, 2026

Consistently store port as the same data type (int)

Status: Open.

#1649 In OWASP/Nettacker;

· Aarush289 opened on Aug 5, 2026

Inconsistent port extraction in process_conditions() in base.py

Status: Open.

#1646 In OWASP/Nettacker;

· Aarush289 opened on Aug 5, 2026

Harden CI/CD workflow token permissions (OpenSSF Scorecard Token-Permissions: 0)

Status: Open.

#1645 In OWASP/Nettacker;

· anshul23102 opened on Aug 2, 2026

New vulnerability detection module for CVE-2026-33017 (Langflow unauthenticated RCE)

Status: Open.

#1640 In OWASP/Nettacker;

· NSK-394 opened on Jul 27, 2026

Publish multi-arch (arm64) Docker image — owasp/nettacker:latest is amd64-only

answered

Status: Open.

#1616 In OWASP/Nettacker;

· AtifAssari opened on Jul 12, 2026