TOPIC SECURITY
CVEs & Patching how vulnerabilities get names
IN 10 SECONDS
Common Vulnerabilities and Exposures (CVE) index catalog security bugs. Patching is the process of updating system packages and dependencies to run patched releases.
GOTCHA Ignoring package updates accumulates security debt. Older CVEs are well-documented, making them target points for automated script scanners.
HOW VULNERABILITIES ARE RESOLVED
01 Bug found researcher reports security bug. CVE index assigns tag: CVE-2026-1234.
02 Publish vendor releases package update containing patch fixes.
03 Pipeline scan security scanner flags active container: lodash has CVE-2026-1234.
04 Update run engineer updates project lockfile to pull new package version.
POKE IT YOURSELF
trivy fs . — scan local directory dependencies for known CVEs
npm audit — check package project dependencies for vulnerability alerts
Drill this topic →
~70 sec read