🛡️ Security

Transitive Dependency

A software component your application relies on indirectly, pulled in by a library you chose or bundled into a product you deployed rather than selected directly. A vulnerability in a widely reused transitive dependency exposes every product that ships it.

📚 Deep Dive

Learn Article

Why a Flaw in One Shared Library Means Patching Eight Products at Once

When one bug lands in eight products, they shared a library. Why the headline product is the patching trap, why inventory is the real control, and how to scope a response to the component.

intermediate 4 min read

Back to Glossary