## projectdiscovery/nuclei — v3.7.1…v3.8.0

_128 commits._

### Features
- **add cross-platform service name fallback and port dedup** (d305dd6)
- **Merge pull request #7311 from projectdiscovery/dwisiswant0/test/add-fuzz-tests** (c6fb1ae)
- **support service names in network template port field** (cb0a9f4)
- **add inline targets and secrets to template profiless (#5567) (#6858)** (5e8ef27)
- **feat: add honeypot detection to reduce scan noise (#6403)** (658df54)
- **Merge pull request #7119 from projectdiscovery/dwisiswant0/ci/add-GITHUB-TOKEN-to-workflows-for-auth-d-template-updates** (2e5ed57)
- **feat(reporting): add PDF export option for scan results** (42b7a11)
- **feat(fuzz): add XSS reflection context analyzer** (0d4c4cb)
- **feat(http): respect `annotations` in `unsafe` mode** (a2e49ab)

### Fixes
- **fix(js): interrupt goja runtime on context cancel (#7343)** (ad74c60)
- **Merge pull request #7337 from dahezhiquan/fix/default-version-compare** (6c88897)
- **Merge pull request #7342 from projectdiscovery/dwisiswant0/fix/sdk/respect-WithOptions-rate-limit** (796d430)
- **fix flaky TestActionWaitDialog on Windows CI** (c5c2127)
- **Merge pull request #7325 from projectdiscovery/fix/headless-tlsi-addheader** (0383fbf)
- **fix DAST skipping URLs with part: request and mode: multiple (#7326)** (0e67be7)
- **fix(sdk): respect `WithOptions` rate limit** (a2a27e5)
- **fix(expressions): avoid helper eval in literal checks (#7321)** (6c803c7)
- **fix: add continue after handling default template version in GetNewTemplatesInVersions** (da17fa4)
- **fix(js): respect `allow-local-file-access` in `require` (#7332)** (6f2ade6)
- **fix headless JS loading with -tlsi and addheader/setheader** (10cccb7)
- **fix(js): watchdog + propagates context to all JS library network calls (#7299)** (3537030)
- **Merge pull request #7294 from mikhail5555/fix/data-race-condition-global-variable** (9e2366f)
- **Merge pull request #7298 from projectdiscovery/7295-dynamic-auth-flow-fix** (4177a48)
- **Merge pull request #7125 from usernametooshort/fix/time-delay-missing-custom-headers** (c8a9853)
- **fix(websocket): path handling when merging template & target URLs (#7290)** (233af2c)
- **fix(fuzz): concurrent map writes in multipart form parsing (#7291)** (c2f3397)
- **Merge pull request #6944 from maxwolf8852/fix/noHostErrors-panic** (406ad1a)
- **fix lint** (4344080)
- **Merge pull request #7286 from projectdiscovery/4685-fix-fhr-redirect-port-normalization** (e4edd5a)
- **Merge pull request #7287 from projectdiscovery/4927-fix-elasticsearch-ip-host-validation** (f70353b)
- **small fix** (3bcf21d)
- **fix(fuzz): use actual parameter for frequency dedupe (#7037)** (0ae6d90)
- **fix(fuzz): prevent path mutation across sequential Rebuild calls (#6398) (#7253)** (67e8806)
- **fix: resolve auth secret file race condition using sync.Once (#6976)** (9caa62e)
- **Merge pull request #7215 from sandiyochristan/fix/use-crypto-rand-in-js-globals** (032fc8d)
- **Merge pull request #7045 from projectdiscovery/dwisiswant0/fix/utils/normalize-unbracketed-IPv6-literals-for-probing** (3ec23a9)
- **fix: address CodeRabbit review findings** (baddf6a)
- **Merge pull request #6760 from JawsKim/fix/issue-5579-large-exclusion-hang** (3497738)
- **fix lint** (2dad77a)
- **fix(expressions): only eval template-authored expressions (#7221)** (d221732)
- **Merge pull request #7043 from projectdiscovery/dwisiswant0/fix/http/isolate-project-cache-keys-by-scheme-host** (bc37a26)
- **fix: use crypto/rand instead of math/rand in JS global functions** (44ef9ce)
- **fix: address CodeRabbit review feedback** (e38953d)
- **Merge pull request #7033 from projectdiscovery/fix/encoding-hides-unresolved-vars** (979c867)
- **fix(fuzz): fix URI detection, duplicate type attr, and missing urlAttrs** (ef4bb22)
- **fix(fuzz): fix godoc comments on package-level vars** (2b3cb3e)
- **fix(fuzz): add missing event handlers and strip MIME params from script type** (a22ead4)
- **fix(fuzz): fix error propagation and remove dead code in XSS analyzer** (0d5dc6d)
- **fix(fuzz): address edge cases in XSS context analyzer** (049b4f2)
- **fix: add backward-compatible deprecated alias for ExludedDastTmplStats** (31ba00c)
- **Merge pull request #7026 from n3integration/fix/executor-concurrency-improvement** (b5cb4cc)
- **Merge pull request #7020 from Pitrat-wav/fix-docs-links-proper** (da97a74)
- **Merge pull request #7129 from usernametooshort/fix/host-spray-skip-unresponsive-early** (1fe5647)
- **Merge pull request #7145 from projectdiscovery/dwisiswant0/fix/runner/use-Print-instead-to-listAvailableStoreTags** (f9b21a7)
- **perf(runner): using a fastpath for tag listing (#7143)** (18b4981)
- **fix(runner): use Print instead to listAvailableStoreTags** (b53ec96)
- **fix(core): skip remaining templates in host-spray when host is unresponsive** (5dd94cb)
- **fix(time-delay): propagate custom headers to follow-up delay requests** (2d8e403)
- **Merge branch 'dev' into fix/encoding-hides-unresolved-vars** (870ad46)
- **fix(http): isolate project cache keys by scheme & host** (50996a7)
- **fix(utils): normalize unbracketed IPv6 literals for probing** (b84480a)
- **Merge branch 'dev' into fix/encoding-hides-unresolved-vars** (7ab71db)
- **fix(expressions): propagate unresolved variable markers through encoding functions** (44494e6)
- **fix: executor concurrency improvements** (e4a1d48)
- **fix panic** (b313076)
- **fix: address review comments (Redundant check)** (0ab779b)
- **fix: address review comments (Incorrectly check)** (c9c4bcf)
- **fix: address review comments (use MetaInput and update counters)** (ab9c60e)
- **fix(input): optimize removeTargets to prevent hang on large exclusions** (201bec2)

### Backend
- **Merge pull request #7344 from projectdiscovery/dev** (aa52d85)
- **version update** (2035523)
- **Merge pull request #7303 from projectdiscovery/feat/service-name-ports** (459c5cf)
- **merge dev and resolve testutils import conflict** (73d2afc)
- **Merge pull request #7300 from projectdiscovery/5095-flow-request-condition-tests** (aa529cd)
- **remove init** (a8c8645)
- **lint** (986aef4)
- **adding tests** (db06e2c)
- **fixing flow with auth** (ab0199b)
- **Merge pull request #7292 from projectdiscovery/5350-code-execution-error-logging** (a86ee99)
- **only override maxRedirects if options.MaxRedirects > 0** (49a0ffe)
- **remove global variable from clientpool in favour for local variable** (9cc8456)
- **adding tests** (18ab917)
- **capturing stderr** (3a004d1)
- **fixing test** (625d683)
- **Merge branch 'dev' into pr/6944** (3d259eb)
- **fixing elastic export** (54cc7d2)
- **fixing redirect** (2f03145)
- **Remove executable bit (#7282)** (6eda56f)
- **Merge pull request #7277 from HarshadaGawas05/feat/honeypot-detection** (48e05ca)
- **fmt + docs** (63d0df9)
- **Merge pull request #7164 from ZachL111/feat/xss-context-analyzer** (22e325f)
- **adding interface** (29ae75b)
- **Merge remote-tracking branch 'origin/dev' into pr/7164** (199c0e4)
- **Merge pull request #7254 from Gengyscan/feat/pdf-export** (f480e86)
- **ignoring alias** (06c228d)
- **refactor cidr contain logic** (95258ec)
- **Merge branch 'dev' into pr/6760** (31f53a8)
- **fixing further race condition** (2956176)
- **use per field lock** (c40fec0)
- **Merge pull request #7042 from projectdiscovery/dwisiswant0/refactor/types/make-resume-state-as-cache-data** (20a565f)
- **Merge pull request #7044 from projectdiscovery/dwisiswant0/feat/http/respect-raw-annotations-in-unsafe-mode** (8246680)
- **adding skip event** (61dd5d2)
- **update Snapshot method signature** (2d0076e)

### Tests
- **test: add fuzz tests** (35146e0)
- **test(lib): add TestThreadSafeNucleiEngineWithNoHostErrors** (002b58d)

### Docs
- **docs: update syntax & JSON schema 🤖** (1f20707)
- **docs: update syntax & JSON schema 🤖** (d5eafeb)
- **docs: update outdated documentation links in all translations** (50c1b3a)

### Chore
- **chore(deps): upgraded github.com/projectdiscovery/utils v0.10.0 => v0.10.1 (#7345)** (24af3d9)
- **ci(tests): disable perf-regression job call** (a783a82)
- **refactor: native tests (#7307)** (f893b6c)
- **chore(deps): bump the modules group with 2 updates (#7339)** (56e53cf)
- **chore(deps): bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream (#7335)** (4eb0b22)
- **chore(typos): add Writeable to extend-words** (1347c88)
- **chore(deps): bump crate-ci/typos in the workflows group (#7330)** (75e67a5)
- **chore(deps): bump the modules group with 3 updates (#7329)** (a2fb27a)
- **chore(deps): bump github.com/go-git/go-git/v5 (#7310)** (4ae87be)
- **chore(deps): bump the modules group with 6 updates (#7309)** (78dbaeb)
- **chore(deps): bump github.com/antchfx/xpath (#7308)** (2e895d7)
- **chore(deps): bump the modules group with 8 updates (#7288)** (e5e8dc7)
- **chore(deps): bump the workflows group with 2 updates (#7289)** (35e7d6e)
- **chore(deps): bump github.com/buger/jsonparser (#7272)** (35e6e94)
- **ci: integrate typos spell checker into CI workflow (#6532)** (c56fe37)
- **chore(deps): bump the modules group across 1 directory with 4 updates (#7236)** (b099852)
- **chore(deps): bump docker/login-action from 3 to 4 in the workflows group (#7160)** (6b4a9c4)
- **ci: integrate typos spell checker into CI workflow** (63e5492)
- **ci: add GITHUB_TOKEN to workflows for auth'd template updates** (2f31523)
- **refactor(types)!: make resume state as cache data** (c159e62)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/projectdiscovery/nuclei?utm_source=github-action)._