{
  "slug": "vulnerable-outdated-components",
  "url": "https://library.infinity8labs.com/vulnerable-outdated-components/",
  "title": "Vulnerable and outdated components",
  "short": "Outdated components",
  "aliases": [
    "Known vulnerable dependencies",
    "Unsupported software",
    "Dependency vulnerabilities",
    "Unpatched components"
  ],
  "summary": "Applications inherit risk from unsupported or vulnerable libraries, frameworks, runtimes, images, appliances, and services. A reachable weakness in one component can compromise the entire application or its supply chain.",
  "cwe": [
    "CWE-1104"
  ],
  "owasp": "A06:2021 Vulnerable and Outdated Components",
  "typical_severity": {
    "min": "low",
    "max": "critical"
  },
  "updated": "2026-10-15",
  "references": [
    {
      "title": "CWE-1104: Use of Unmaintained Third Party Components",
      "url": "https://cwe.mitre.org/data/definitions/1104.html"
    },
    {
      "title": "OWASP Top 10 A06:2021 Vulnerable and Outdated Components",
      "url": "https://owasp.org/Top10/A06_2021-Vulnerable_and_Outdated_Components/"
    },
    {
      "title": "CISA Known Exploited Vulnerabilities Catalog",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "title": "NIST Secure Software Development Framework",
      "url": "https://csrc.nist.gov/pubs/sp/800/218/final"
    },
    {
      "title": "OWASP Dependency-Check",
      "url": "https://owasp.org/www-project-dependency-check/"
    }
  ],
  "sections": [
    "https://library.infinity8labs.com/vulnerable-outdated-components/#overview",
    "https://library.infinity8labs.com/vulnerable-outdated-components/#impact",
    "https://library.infinity8labs.com/vulnerable-outdated-components/#examples",
    "https://library.infinity8labs.com/vulnerable-outdated-components/#remediation",
    "https://library.infinity8labs.com/vulnerable-outdated-components/#testing",
    "https://library.infinity8labs.com/vulnerable-outdated-components/#references"
  ]
}