OWASPASVS 5.0 requirement
ASVS-V15.2.4 Third-party components and all of their transitive dependencies are included from the expected repository, whether internally owned or an…
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.2 Security Architecture and Dependencies
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that third-party components and all of their transitive dependencies are included from the expected repository, whether internally owned or an external source, and that there is no risk of a dependency confusion attack.