-- [Configure and Use Dependency Management]
A dependency has a known vulnerability. What does the warning message include?
When a vulnerability is detected, GitHub shows a warning that includes a brief description of the vulnerability. This typically covers the name of the CVE (if available), a short summary of the issue, severity level, and potential impact. The message also links to additional advisory data from the GitHub Advisory Database.
This helps developers understand the context and urgency of the vulnerability before applying the fix.
Currently there are no comments in this discussion, be the first to comment!