A dependency has a known vulnerability. What does the warning message include?

The correct answer is B. a brief description of the vulnerability. When GitHub's Dependabot detects a known vulnerability in a dependency, the alert warning message includes a brief description of the vulnerability - typically referencing the CVE or advisory, severity level, and what is affected. It does not include visualizations of…

Configure and use Dependabot and Dependency Review

Question

Options

Aan easily understandable visualization of dependency change
Ba brief description of the vulnerability
Chow many projects use these components
Dthe security impact of these changes

How the community answered

(23 responses)

A
9% (2)
B
87% (20)
D
4% (1)

Explanation

When GitHub's Dependabot detects a known vulnerability in a dependency, the alert warning message includes a brief description of the vulnerability - typically referencing the CVE or advisory, severity level, and what is affected. It does not include visualizations of dependency changes (A), project usage statistics (C), or a full security impact analysis (D). Those details may be found in the linked advisory, but the alert itself is intentionally concise.

Topics

#Dependency vulnerability#Dependabot alerts#Vulnerability description#Dependency Review

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice