Skip to content

Scan rule · RSC-SEC-080

Dependencies with a known vulnerability

SecuritySeverity: HighCWE-1395OWASP A06-2021

Matches the repository's package versions against the public OSV database and names the affected packages with advisory IDs.

Scan tier

Repo access (deep scan)

How to fix it

Raise affected packages to the patched version and set up a recurring update run.

Scan your own app for free

More rules in this dimension

RSC-SEC-001

No end-to-end HTTPS

RSC-SEC-002

HSTS header missing

RSC-SEC-003

No Content-Security-Policy

RSC-SEC-004

MIME sniffing not disabled

RSC-SEC-005

No clickjacking protection

RSC-SEC-006

CORS wildcard on the public document