Information Disclosure: JavaScript Library¶

Identifier: frontend_software_component_leak

Deprecated

This vulnerability type is no longer detected by Escape. Existing findings remain available, but no new reports will be created. A currently supported security test may cover the same underlying risk.

Scanner Support¶

GraphQL Scanner	REST Scanner	WebApp Scanner	ASM Scanner	Automated Pentest

Description¶

When frontend applications expose details about JavaScript libraries or dependencies, it gives attackers clues about potential vulnerabilities to exploit, making it easier to identify outdated or weak components.

How we test: We analyze frontend JavaScript bundles and responses to detect if version information or library references are exposed. We check if applications properly obfuscate library references and if version information is included in JavaScript files that could aid attackers.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  frontend_software_component_leak:
    skip: false

Reference¶

`skip`¶

Type: boolean

Skip the test if true.