SCA: security update for shelljs (GHSA-64g7-mvw6-v9qj)

high Tenable Cloud Security Plugin ID 411176

Description

Improper Privilege Management in shelljs

See Also

https://github.com/advisories/GHSA-64g7-mvw6-v9qj

https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c/

Plugin Details

Severity: High

ID: 411176

Version: Revision 1.2

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 1/29/2025

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/14/2022

Vulnerability Publication Date: 1/14/2022

Reference Information

cwe: CWE-269