## What's Changed ### 🎉 New Features * Added `cdp-endpoint` option to allow users to specify a WebSocket endpoint for control in headless mode by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/5786 * Added RSYNC module by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/6410 ### 🐞 Bug Fixes * Fixed resume file path condition by @dogancanbakir in https://github.com/projectdiscovery/nuclei/pull/6784 * Fixed race condition regression by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6748 * Fixed duplicate log spam for permanent errors by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6697 * Fixed `ExecutionId` initialization in `DefaultOptions` function by @dogancanbakir in https://github.com/projectdiscovery/nuclei/pull/6598 * Fixed handling full URLs in unsafe raw requests by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6589 * Fixed segfault in workflow parsing with global-matchers templates by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6774 * Fixed logging update summary table to stderr by @ayuxsec in https://github.com/projectdiscovery/nuclei/pull/6769 * Fixed sanitizing host when target has host port by @knakul853 in https://github.com/projectdiscovery/nuclei/pull/6759 * Fixed interactsh matching with `payloads` by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6778 * Fixed passing template variables to TCP inputs pre-compilation by @dogancanbakir in https://github.com/projectdiscovery/nuclei/pull/6776 ### Other Changes * Replaced seh-msft/burpxml with utils package by @dogancanbakir in https://github.com/projectdiscovery/nuclei/pull/6763 * Removed genproto replace directives from go.mod by @ehsandeep in https://github.com/projectdiscovery/nuclei/pull/6608 * Improved telnet login and added crypto by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/6419 * Added Turkish README and enhanced CONTRIBUTING.md by @bahattinyunus in https://github.com/projectdiscovery/nuclei/pull/6740 * Refactored WithNetworkConfig and WithInteractshOptions to be used by NewThreadSafeNucleiEngineCtx by @meme-lord in https://github.com/projectdiscovery/nuclei/pull/5972 * Improved cache template signature verification performance by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6779 ## New Contributors * @bahattinyunus made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6740 * @promalert made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6756 * @ayuxsec made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6769 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.6.2...v3.7.0

## What's Changed ### ✨ New Features * Enabled TLS session caching in the client pool to improve connection reuse and reduce handshake overhead _(internal)_ by @dwisiswant0 in #6713 * Added support for providing a custom Jira server URL (`site-url`) when using OAuth authentication by @Ice3man543 in #6716 ### 🐞 Bug Fixes * Improved duplicate issue detection by properly paginating Gitea issue searches by @leonjza in #6707 * Restored JavaScript template execution when the `Port` argument is not provided by @dwisiswant0 in #6709 * Added pagination support when searching for duplicate issues in GitLab by @dwisiswant0 in #6712 * Corrected an incorrect PostgreSQL execution call signature in the JavaScript engine by @Mzack9999 in #6731 * Fixed a MySQL panic caused by a missing `executionId` in the execution context by @dwisiswant0 in #6735 * Fixed a segmentation fault in flow execution related to `hasMatchers` by @dwisiswant0 in #6739 ### ⚡ Performance Improvements * Optimized the `MergeMaps` generator to reduce memory allocations by @dwisiswant0 in #6718 ### 🔧 Maintenance * Updated `projectdiscovery/utils` to v0.8.0 to fix a deadlock in `httputil.ResponseChain` by @dwisiswant0 in #6723 * Introduced a PowerShell integration test to improve cross-platform test coverage by @Mzack9999 in #6724 * Updated multiple Go module dependencies across two dependency refreshes by @dependabot[bot] in #6729 & #6741 ### Other Changes * Updated issue and pull request templates by @dwisiswant0 in #6673 * Refactored CI workflows by @dwisiswant0 in #6728, this includes: * Shipping binaries with Green Tea GC enabled via `GOEXPERIMENT` * Shipping binaries built with profile-guided optimization (PGO) * Fixing an auto-merge workflow that never triggered * Switched release tests to use a stable Go version by @dwisiswant0 in #6737 * Upgraded `actions/download-artifact` from v6 to v7 in GitHub workflows by @dependabot[bot] in #6742 * Updated compatibility checks to use a stable Go version by @dwisiswant0 in #6743 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.6.1...v3.6.2

<!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed * Remove genproto replace directives from go.mod by @ehsandeep in https://github.com/projectdiscovery/nuclei/pull/6608 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.5.0...v3.5.1

<!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed ### Other Changes * fix: segfault in template caching logic by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6421 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.4.9...v3.4.10

<!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed ### Other Changes * feat: fixed output event for skipped hosts by @Ice3man543 in https://github.com/projectdiscovery/nuclei/pull/6415 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.4.8...v3.4.9

<!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed ### Features & Improvements - Remove singletons from Nuclei engine (continuation of [#6210](https://github.com/projectdiscovery/nuclei/pull/6210)) ([#6296](https://github.com/projectdiscovery/nuclei/pull/6296)) by @hdm - Address race conditions in `http.Request` and `MemGuardian` ([#6321](https://github.com/projectdiscovery/nuclei/pull/6321)) by @hdm - Support concurrent Nuclei engines in the same process ([#6322](https://github.com/projectdiscovery/nuclei/pull/6322)) by @hdm - feat: log event for template host skipped during scanning ([#6324](https://github.com/projectdiscovery/nuclei/pull/6324)) by @Ice3man543 - feat(code): log unavailable engines as error while validating ([#6326](https://github.com/projectdiscovery/nuclei/pull/6326)) by @dwisiswant0 - Bump `github.com/bytedance/sonic` to v1.14.0 for Go 1.25 compatibility ([#6348](https://github.com/projectdiscovery/nuclei/pull/6348)) by @stefanb - feat: loading templates performance improvements ([#6364](https://github.com/projectdiscovery/nuclei/pull/6364)) by @Ice3man543 - feat(fuzz): evaluate variables ([#6358](https://github.com/projectdiscovery/nuclei/pull/6358)) by @dwisiswant0 - Enable templates for template listing and displaying ([#6343](https://github.com/projectdiscovery/nuclei/pull/6343)) by @dogancanbakir - Refactor: use `maps.Copy` for cleaner map handling ([#6283](https://github.com/projectdiscovery/nuclei/pull/6283)) by @gopherorg ### 🐞 Bug Fixes - Fix headless: variables now available in headless templates ([#6301](https://github.com/projectdiscovery/nuclei/pull/6301)) by @alban-stourbe-wmx - Fix lib: scans not stopping on context cancellation ([#6310](https://github.com/projectdiscovery/nuclei/pull/6310)) by @dwisiswant0 - Fix panic from uninitialized colorizer ([#6315](https://github.com/projectdiscovery/nuclei/pull/6315)) by @josedh - Fix to preserve original transport for linear HTTP client ([#6357](https://github.com/projectdiscovery/nuclei/pull/6357)) by @Ice3man543 - Fix offlinehttp: replace "-" with "_" in headers for DSL variables ([#6363](https://github.com/projectdiscovery/nuclei/pull/6363)) by @Isaac0616 - Fix(events): correct JSON encoder type in `ScanStatsWorker` ([#6366](https://github.com/projectdiscovery/nuclei/pull/6366)) by @dwisiswant0 - Fix: prevent nil pointer panic in WAF detector ([#6368](https://github.com/projectdiscovery/nuclei/pull/6368)) by @knakul853 - Fix headless: merge extra headers ([#6376](https://github.com/projectdiscovery/nuclei/pull/6376)) by @ysokolovsky - Fix: prevent unnecessary template updates ([#6379](https://github.com/projectdiscovery/nuclei/pull/6379)) by @dwisiswant0 ### 🔨 Maintenance - chore(deps): bump the modules group with 3 updates ([#6305](https://github.com/projectdiscovery/nuclei/pull/6305)) by @dependabot[bot] - chore(config): remove deprecated code and calls ([#6311](https://github.com/projectdiscovery/nuclei/pull/6311)) by @dwisiswant0 - build(docker): bump builder image `golang:1.23-alpine` → `golang:1.24-alpine` ([#6316](https://github.com/projectdiscovery/nuclei/pull/6316)) by @dwisiswant0 - chore: fix inconsistent function name in comment ([#6338](https://github.com/projectdiscovery/nuclei/pull/6338)) by @jishudashen - build(make): update `template-validate` commands ([#6385](https://github.com/projectdiscovery/nuclei/pull/6385)) by @dwisiswant0 - chore(deps): bump go_modules group with 2 updates ([#6388](https://github.com/projectdiscovery/nuclei/pull/6388)) by @dependabot[bot] - ci(tests): migrate to golangci-lint v2 ([#6380](https://github.com/projectdiscovery/nuclei/pull/6380)) by @dwisiswant0 ## New Contributors * @josedh made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6315 * @hdm made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6296 * @gopherorg made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6283 * @jishudashen made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6338 * @stefanb made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6348 * @Isaac0616 made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6363 * @ysokolovsky made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6376 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.4.7...v3.4.8

<!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed ### Other Changes * Fixed issue with go install (`github.com/zmap/zgrab2` v0.2.0 => v0.1.8) by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6295 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.4.6...v3.4.7

<!-- Release notes generated using configuration in .github/release.yml at main --> ## What's Changed * Fixed issue with tls connection when socks proxied connection by @circleous in https://github.com/projectdiscovery/nuclei/pull/6218 * Fixed nil schema panic & schema values by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/6228 ## New Contributors * @proabiral made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6223 * @circleous made their first contribution in https://github.com/projectdiscovery/nuclei/pull/6218 **Full Changelog**: https://github.com/projectdiscovery/nuclei/compare/v3.4.3...v3.4.4