Skip to content
Bugb Docs

cxgRelease notes

cxg changelog

All versionsAll versions forward

Version 1.0.0

Added

Core Engine

  • Polyglot template execution supporting 12 programming languages
    • Interpreted: Python, JavaScript, Ruby, Perl, PHP, Shell
    • Compiled: Rust, C, C++, Go, Java
    • Declarative: YAML (Nuclei-compatible)
  • Sandboxed execution with configurable resource limits
  • Compilation caching for compiled language templates
  • Parallel template execution with rate limiting

CLI (cxg)

  • Unified --scope option for target specification (single host, file, CIDR, URL)
  • Smart --templates selection with glob patterns, tags, and severity filtering
  • Template management commands: list, update, validate, info, search
  • Multiple output formats: JSON, HTML, CSV, Markdown, SARIF
  • Configuration via CLI flags, config file, or environment variables

Template System

  • Git-based template repository management with auto-update
  • Official templates repository with 58 templates across 6 languages
  • Template validation and metadata extraction
  • Skeleton templates for all supported languages

Output & Reporting

  • HTML reports with dark theme (Antigravity style)
  • SARIF output for CI/CD integration
  • JSON Lines (JSONL) streaming output
  • Structured finding format with evidence capture

Integration

  • Cookie passthrough for authenticated scanning
  • Proxy support
  • Rate limiting (global, per-host, per-protocol)

Security

  • Sandboxed template execution
  • Template signature verification (planned)
  • Safe defaults for all operations

Note: the “sandboxed execution” claims in this 1.0.0 entry never reflected the shipped binary — template execution has never been isolated or resource-limited. See the 1.3.0 Notes.