Detections
Analytics
SCA: security update for @capgo/cli (GHSA-8mpm-q7mh-8fvh)
high Tenable Self-Hosted Container Security Plugin ID 438933
Description
Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)Solution
Update the @capgo/cli library and its related packages to version 7.84.6 or later.See Also
Plugin Details
Severity: High
ID: 438933
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 3/18/2026
Updated: 3/18/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 3/18/2026
Vulnerability Publication Date: 3/18/2026