There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of
    range) via a crafted GET call. (CVE-2020-36067)

An update of the telegraf package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of     range) via a crafted GET call. (CVE-2020-36067)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
417323	SCA: security update for github.com/tidwall/gjson (GHSA-p64j-r5f4-pwwx)	Tenable Cloud Security	SCA Checks	1/23/2025	7/2/2026	high
417323	SCA: security update for github.com/tidwall/gjson (GHSA-p64j-r5f4-pwwx)	Tenable Self-Hosted Container Security	SCA Checks	1/23/2025	7/2/2026	high
333780	Photon OS 5.0: Telegraf PHSA-2023-5.0-91-0041	Nessus	PhotonOS Local Security Checks	8/10/2026	8/12/2026	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	7/24/2024	8/21/2025	high
255735	Linux Distros Unpatched Vulnerability : CVE-2020-36067	Nessus	Misc.	8/27/2025	9/2/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high