Page Information

Title:	Dealing with security advisories for dependencies
Author:	Unknown User (engelen)	Dec 20, 2023
Last Changed by:	Unknown User (engelen)	Aug 28, 2025
Tiny Link: (useful for email)	https://cwiki-test.apache.org/confluence/x/Wor5E
Export As:	Word · PDF

ASF Security (2)     Page: For what issues to create advisories     Page: SBOM Software Bill of Materials

Parent Page     Home page: ASF Security Home

There are no labels assigned to this page.

Time	Editor
Aug 28, 2025 11:16	Unknown User (engelen)	View Changes
link to https://owasp.org/www-project-dependency-check/
Mar 25, 2025 14:03	Unknown User (bdemers)	View Changes
Corrected location of DependencyTrack link, sorry
Mar 25, 2025 14:02	Unknown User (bdemers)	View Changes
Feb 05, 2025 11:02	Unknown User (engelen)	View Changes
trivy and cve-bin-tool have some VEX consumption features
Nov 22, 2024 08:59	Unknown User (engelen)
link to solr vex

External Links (9)
    https://docs.github.com/en/code-security/dependabot/dependa…
    mailto:security@apache.org
    https://github.com/intel/cve-bin-tool
    https://cwiki.apache.org/confluence/pages/viewpage.action?p…
    https://owasp.org/www-project-dependency-check/
    https://github.com/aquasecurity/trivy/
    https://docs.github.com/en/code-security/supply-chain-secur…
    https://security.apache.org/report-dependency/
    https://solr.apache.org/security.html

ASF Security (1)     Page: SBOM Software Bill of Materials