OWASP Dependency-Check
SCA · Intermediate
Identify known vulnerable dependencies.
Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.
What to learn
- CVE matching
- Reports
Example commands (lab VMs only)
- dependency-check --project lab --scan ./Scan a Maven/Node project