Outdated Dependency

Definitions

1. A library, package, or component version that is older than the currently maintained release and may contain known vulnerabilities, bugs, or unsupported behavior. Outdated dependencies are a common source of supply-chain risk because they often persist unnoticed deep in application stacks.

   In plain English: A software component that is old and no longer up to date, possibly leaving known flaws unpatched.

   Example: "The scanner found an outdated dependency buried in a transitive package chain that still exposed a critical RCE."

Related Terms

• SBOM
• Third-Party Library
• Vendoring
• Open Source Supply Chain
• Package Security
• Transitive Dependency
• Known Vulnerability
• Procurement Security
• Left Pad