Detections
Analytics
SCA: security update for on-headers (GHSA-76c9-3jph-rj3q)
low Tenable Self-Hosted Container Security Plugin ID 428441
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers
versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to
`response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly
encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to
`response.writeHead()` rather than an array. (CVE-2025-7339)
See Also
Plugin Details
Severity: Low
ID: 428441
Version: Revision 1.9
Type: Local
Family: SCA Checks
Published: 7/18/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.1
Percentile: 7.46
Vendor
Vendor Severity: Low
CVSS v2
Risk Factor: Low
Base Score: 2.9
Temporal Score: 2.1
Vector: CVSS2#AV:L/AC:L/Au:M/C:P/I:P/A:N
CVSS Score Source: CVE-2025-7339
CVSS v3
Risk Factor: Low
Base Score: 3.4
Temporal Score: 3
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/17/2025
Vulnerability Publication Date: 7/17/2025
Reference Information
CVE: CVE-2025-7339
cwe: CWE-241