The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been     rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation     leads to inefficient regular expression complexity. The attack may be launched remotely. The complexity of     an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the     public and may be used. Upgrading to version 1.1.12, 2.0.2, 3.0.1 and 4.0.1 is able to address this issue.
    The name of the patch is a5b98a4f30d7813266b221435e1eaaf25a1b0ac5. It is recommended to upgrade the     affected component. (CVE-2025-5889)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-5889

low Nessus Plugin ID 248416

Version 1.4

Version 1.3

Version 1.2

Version 1.4 Sep 30, 2025, 12:41 AM CVSS metrics ("Cvssv4 score" set to 1.3) Detection (updated detection logic) Plugin Feed: 202509300041
Version 1.3 Sep 11, 2025, 5:16 AM CVSS metrics ("CVSSv2 score" set to 4.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P") CVSS metrics ("Cvssv4 score" set to 1.3) CVSSv2 severity (based on CVE-2025-5889, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509110516
Version 1.2 Aug 31, 2025, 9:16 AM CVSS metrics ("Cvssv4 score" set to 1.3) Detection (updated detection logic) Plugin Feed: 202508310916