PkgRadar

Go modules · proxy.golang.org

github.com/Projectdiscovery/nuclei-templates

Shipped Live Secret, Credential file access

Why PkgRadar flagged v10.4.6-0.20260706040826-f09a2c17821f+incompatible

SeveritySignalEvidence
highShipped Live Secret—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v10.4.6-0.20260706040826-f09a2c17821f+incompatibleHigh risk932026-07-07
v9.3.4-0.20230322032541-c87867c691f7+incompatibleReview242026-07-07
v7.3.6+incompatibleReview32026-07-07
v1.1.9Low risk02026-07-07
v10.4.5+incompatibleHigh risk932026-07-07

Block this in CI

PkgRadar gates github.com/Projectdiscovery/nuclei-templates (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Projectdiscovery/[email protected]+incompatible
Start free — 25 scans / moView full evidence
github.com/Projectdiscovery/nuclei-templates — Go modules security scan | PkgRadar