Dependency Vulnerabilities
High · Supply Chain · CWE-1104
Description
Known CVEs in third-party libraries.
Root cause
Unpatched dependencies.
Impact
RCE, data breach via library flaws.
Detection
SCA in CI; SBOM monitoring.
Mitigation
Patch/update; pin versions; monitor advisories.
Secure coding
Automate Dependabot/Renovate + SCA gates.
Safe lab example
lab-sbom
Practise related skills in Labs or deepen on Academy library.