Detections
Analytics
SCA: security update for grumpydictator/firefly-iii (GHSA-6jq6-x4cx-qvcm)
high Tenable Cloud Security Plugin ID 443125
Description
Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)Solution
Update the grumpydictator/firefly-iii library and its related packages to version 6.6.3 or later.See Also
Plugin Details
Severity: High
ID: 443125
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 6/12/2026
Updated: 6/12/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 6/12/2026
Vulnerability Publication Date: 6/12/2026