Detections
Analytics

SCA: security update for fastapi-guard (GHSA-rrf6-pxg8-684g)

high Tenable Self-Hosted Container Security Plugin ID 428621

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests,
 detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the
 ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this limit. This
 type of patch fails to detect cases in which the string representing the attributes of a <script> tag
 exceeds 100 characters. As a result, most of the regex patterns present in version 3.0.1 can be bypassed.
 This is fixed in version 3.0.2. (CVE-2025-54365)

See Also

https://github.com/advisories/GHSA-rrf6-pxg8-684g

Plugin Details

Severity: High

ID: 428621

Version: Revision 1.13

Type: Local

Family: SCA Checks

Published: 7/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 94.66

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2025-54365

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 8.8

Threat Score: 7.8

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/23/2025

Vulnerability Publication Date: 7/23/2025

Reference Information

CVE: CVE-2025-54365