Emerald Red Team

ERT-SUPPLY-003

Client-side library with known CVEs

MediumA03:2025CWE-1395

Why it matters

Vulnerable and hallucinated packages, CI workflows. This check looks specifically for: client-side library with known cves.

How to fix it

Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.

How we test it

Passive — runs in the free check, looks only at what a browser can see.

Does your app have this problem?

The free Quick Check tests for it.

Scan my app — free