Expired75% confidenceFactExact time
SCA (Software Composition Analysis) checks whether third-party dependencies have known vulnerabilities by cross-referencing vulnerability databases such as CVE/NVD.
3
Sources
75%
Confidence
Medium-term (~90 days)
Relevance
7/2/2026
First Seen
Valid until: 9/30/2026(expired)
Sources
Related Claims
UnverifiedCI/CD 安全集成可部署 SAST 分析源代码漏洞、SCA 检查依赖组件已知漏洞、SBOM 生成组件清单用于审计77% similarVerifiedThe CVE (Common Vulnerabilities and Exposures) database is the world's most authoritative vulnerability numbering system, with new vulnerabilities being disclosed and recorded every day.66% similarUnverifiedCWE是由MITRE维护的软件安全缺陷分类标准，涵盖SQL注入（CWE-89）、缓冲区溢出（CWE-121）等数百种漏洞类型63% similarUnverifiedClaude Code's /security review command covers vulnerability checks for SQL injection, XSS, key leakage, and privilege escalation.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/61436API
curl https://kongchang.com/api/v1/knowledge/claims/61436MCP
get_claim(id=61436)