Detections
Analytics
SCA: security update for fido2-lib (GHSA-g3qj-j598-cxmq)
high Tenable Self-Hosted Container Security Plugin ID 439175
Description
fido2-lib is vulnerable to DoS via cbor-extract heap buffer over-read in CBOR attestation parsingSolution
Update the fido2-lib library and its related packages to version 3.5.8 or later.See Also
Plugin Details
Severity: High
ID: 439175
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 3/25/2026
Updated: 3/25/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 3/24/2026
Vulnerability Publication Date: 3/24/2026