There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly
    generates random numbers because math/rand is used. The TXID becomes predictable, leading to response
    forgeries. (CVE-2019-19794)

An update of the kapacitor package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly     generates random numbers because math/rand is used. The TXID becomes predictable, leading to response     forgeries. (CVE-2019-19794)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the telegraf package has been released.

ID	Name	Product	Family	Published	Updated	Severity
409943	SCA: security update for github.com/miekg/dns (GHSA-44r7-7p62-q3fr)	Tenable Cloud Security	SCA Checks	1/23/2025	7/2/2026	medium
409943	SCA: security update for github.com/miekg/dns (GHSA-44r7-7p62-q3fr)	Tenable Self-Hosted Container Security	SCA Checks	1/23/2025	7/2/2026	medium
332194	Photon OS 5.0: Kapacitor PHSA-2023-5.0-91-0045	Nessus	PhotonOS Local Security Checks	8/5/2026	8/5/2026	critical
204224	Photon OS 5.0: Kapacitor PHSA-2023-5.0-0045	Nessus	PhotonOS Local Security Checks	7/24/2024	7/25/2024	critical
250999	Linux Distros Unpatched Vulnerability : CVE-2019-19794	Nessus	Misc.	8/18/2025	7/6/2026	medium
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	7/24/2024	8/21/2025	high

Detections

Analytics

Plugins Search

medium

medium

critical

critical

medium

high