Cortex CloudApplication Security
Deprecated package used in NPM project
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_268
Category
Dependency Chains
Severity
HIGH
Impact
Deprecated packages can pose security risks to the project such as code vulnerabilities that can be discovered overtime and malicious package takeover due to configuration that change over time like the maintainer's email domain expiring.
Recommended Solution - Buildtime
Remove the deprecated package from the project by executing ‘npm uninstall <PACKAGE_NAME>’.
PreviousSecret exposed in registry URL within '.npmrc' file
NextPotential dependency confusion due to package name or scope available in registry
Last updated
Was this helpful?