CVE Scanning
Domain: Security
🎯 Motivation
CVEs (Common Vulnerabilities and Exposures) are publicly disclosed security flaws. Scanning your dependencies against the CVE database ensures you are not shipping known-vulnerable code.
📋 Concrete Example
A CVE may announce that urllib3 before 1.26.5 leaks authentication headers. Your scanner flags your pinned urllib3==1.26.4, and you bump to 1.26.5 to close the hole.
🔗 Analogy
Recall notices for cars are published publicly. A responsible owner checks the list and takes their car in for the free fix — ignoring recalls leaves known dangers unaddressed.