Maven Dependency Check

2018-02-04 19:41:13

Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java and .NET are supported; additional experimental support has been added for Ruby, Node.js, Python, and limited support for C/C++ build systems (autoconf and cmake). The tool can be part of a solution to the OWASP Top 10 2013 A9 - Using Components with Known Vulnerabilities.

PoC

• https://github.com/szalek/dependency-check-lab

Reference

• https://www.owasp.org/index.php/OWASP_Dependency_Check
• https://jeremylong.github.io/DependencyCheck/dependency-check-maven/index.html