Detections
Analytics
SCA: security update for velocityjs (GHSA-7gfh-x38p-prh3)
high Tenable Cloud Security Plugin ID 445236
Description
Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)Solution
Update the velocityjs library and its related packages to version 2.1.7 or later.See Also
Plugin Details
Severity: High
ID: 445236
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 7/24/2026
Updated: 7/24/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/24/2026
Vulnerability Publication Date: 7/24/2026
Reference Information
cwe: CWE-94