Detections
Analytics
SCA: security update for getgrav/grav (GHSA-vj3m-2g9h-vm4p)
high Tenable Self-Hosted Container Security Plugin ID 441211
Description
Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypassSolution
Update the getgrav/grav library and its related packages to version 2.0.0-beta.2 or later.See Also
Plugin Details
Severity: High
ID: 441211
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 5/6/2026
Updated: 5/6/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 5/5/2026
Vulnerability Publication Date: 5/5/2026