Detections
Analytics

SCA: security update for hyperterse (GHSA-92gp-jfgx-9qpv)

medium Tenable Self-Hosted Container Security Plugin ID 438680

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Hyperterse is a tool-first MCP framework for building AI-ready backend surfaces from declarative config.
 Prior to v2.2.0, the search tool allows LLMs to search for tools using natural language. While returning
 results, Hyperterse also returned the raw SQL queries, exposing statements which were supposed to be
 executed under the hood, and protected from being displayed publicly. This issue has been fixed as of
 v2.2.0. (CVE-2026-31841)

Solution

Update the hyperterse library and its related packages to version 2.2.0 or later.

See Also

https://github.com/advisories/GHSA-92gp-jfgx-9qpv

Plugin Details

Severity: Medium

ID: 438680

Version: Revision 1.7

Type: Local

Family: SCA Checks

Published: 3/12/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 2.1

Percentile: 7.71

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Temporal Score: 4.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2026-31841

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 3/12/2026

Vulnerability Publication Date: 3/12/2026

Reference Information

CVE: CVE-2026-31841

cwe: CWE-433