Common Weakness Enumeration

    CWE Definition / CWE-1395

    CWE-1395: Dependency on Vulnerable Third-Party Component

    The product has a dependency on a third-party component that contains one or more known vulnerabilities.

    Published:25 Jan 2023
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-1357: Reliance on Insufficiently Trustworthy Component

    CWE-657: Violation of Secure Design Principles