Cortex CloudApplication Security
Deprecated package used in NPM project of a Bitbucket repository
Rule Details
Cortex AppSec Rule ID
APPSEC_CICD_282
Category
Dependency Chains
Severity
HIGH
Impact
Deprecated packages can pose security risks to the project such as code vulnerabilities that can be discovered overtime and malicious package takeover due to configuration that change over time like the maintainer's email domain expiring.
PreviousSecret exposed in registry URL within '.npmrc' file of a Bitbucket repository
NextPotential dependency confusion in a Bitbucket repository due to package name or scope available in r
Last updated
Was this helpful?