ERT-SUPPLY-003
Client-side library with known CVEs
MediumA03:2025CWE-1395
Why it matters
Vulnerable and hallucinated packages, CI workflows. This check looks specifically for: client-side library with known cves.
How to fix it
Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.
How we test it
Passive — runs in the free check, looks only at what a browser can see.
