## projectdiscovery/nuclei — v3.9.0…v3.10.0

_31 commits._

### Features
- **fuzz: add parser harnesses for raw requests & templates (#7459)** (8a02819)

### Fixes
- **fix leaks (#7502)** (f826734)
- **fix(yaml): reject recursive include chains (#7492)** (2d84075)
- **fix(http): reject request-condition(s) in fuzzing (#7466)** (14b89f8)
- **fix(js): reject unsandboxed ccache writes in krbforge (#7482)** (3a8b65c)
- **fix(js): escape mssql database name in conn URL (#7481)** (4c03c29)
- **fix(js): normalize & reject trace file DSN opts in oracle (#7480)** (7ed3c9e)
- **fix(js): respect network policy before dialing ldap (#7494)** (9def9af)
- **fix(js): escape dbname in lib/pq URL (#7479)** (68daef4)
- **fix(network): record decoded bytes for debug dump (#7478)** (a86c4fa)
- **fix: escape literal `.` in ASCII-section regex (#7476)** (0547616)
- **Fix connection reuse + port pre-flight (#6715)** (c041bf2)
- **fix: preserve explicit target port in network templates (fixes #7323) (#7465)** (0d78558)
- **fix(hosterrorscache): skip hosts that consistently time out (#7455)** (7f6096e)

### Backend
- **Merge pull request #7474 from projectdiscovery/dev** (f9cf234)
- **bump goja (#7467)** (1fe6025)
- **bump version** (85abc4f)
- **gate mysql allowAllFiles behind -lfa (#7473)** (9611926)
- **check code template signature before dast load (#7472)** (1c440e7)
- **per-host http client pool (#7301)** (63124ef)

### Chore
- **refactor(protocols): template rendering boundary (#7499)** (ccbfb12)
- **chore(deps): bump the modules group with 6 updates (#7510)** (1e294aa)
- **chore(deps): bump github.com/opencontainers/runc (#7512)** (d63d022)
- **chore(deps): bump actions/cache from 5 to 6 in the workflows group (#7511)** (77d8b42)
- **chore(deps): drop yaml.v2 from fuzz harness** (1512979)
- **refactor(templates): centralize opt-in capability gates (#7489)** (638be44)
- **chore(deps): bump the modules group with 3 updates (#7490)** (323df47)
- **chore(deps): bump actions/checkout from 6 to 7 in the workflows group (#7491)** (69c8d02)
- **chore(deps): strip dependencies (#7457)** (4cabca0)
- **chore(deps): bump govaluate to fix slice-bounds panic on invalid UTF-8 input (#7464)** (c0b1f4b)
- **chore(deps): bump the modules group with 3 updates (#7463)** (acff3e3)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/projectdiscovery/nuclei?utm_source=github-action)._