javascript libraries with known vulnerabilities
What it can report
- ✗ critical retire.js severity (low..critical) of the worst known vulnerability in a library version the page loads; a CVE on CISA's KEV list is named in the finding. Client-side library versions are exact (they come from the file) and are not back-ported, so the severity is retire.js's own. How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 3 within Security. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.