Detections
Analytics

SCA: security update for robots-txt-guard (GHSA-6g33-8w2q-4hxv)

high Tenable Self-Hosted Container Security Plugin ID 411416

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A vulnerability was found in Woorank robots-txt-guard. It has been rated as problematic. Affected by this
 issue is the function makePathPattern of the file lib/patterns.js. The manipulation of the argument
 pattern leads to inefficient regular expression complexity. The exploit has been disclosed to the public
 and may be used. The name of the patch is c03827cd2f9933619c23894ce7c98401ea824020. It is recommended to
 apply a patch to fix this issue. The identifier of this vulnerability is VDB-217448. (CVE-2021-4305)

See Also

https://github.com/advisories/GHSA-6g33-8w2q-4hxv

Plugin Details

Severity: High

ID: 411416

Version: Revision 1.7

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2021-4305

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/5/2023

Vulnerability Publication Date: 1/5/2023

Reference Information

CVE: CVE-2021-4305