Skip to content
The Nexus
DossierENTITY

CVE Lite CLI

Coverage of CVE Lite CLI in the Nexus archive.

Earliest in view: Jun 23 · 00:17 UTCMost recent: Jun 23 · 00:17 UTC
Co-mentioned in this coverage
OWASPorganization1Sonu Kapoorperson1Shai-Huludtopic1node-ipctopic1Cal.comorganization1
Recent coverage
  • SECURITYJun 23 · 00:17 UTCTHE REGISTER
    Sniff out stale AI override advice with this open source CLI

    The CVE Lite CLI, an open-source tool endorsed by OWASP, helps developers scan dependencies to mitigate software supply chain attacks. Its recent update includes override auditing to address transitive dependency vulnerabilities, such as those seen in the node-ipc package incident and Shai-hulud attacks. The tool identifies broken overrides in projects like Cal.com, which had 11 ineffective override entries.