The plain-English version
A published description of a known security issue affecting identified software versions or conditions.
Why it matters
It helps prioritize investigation of the dependencies actually present in a project.
Let’s make it click
A scanner matches an installed library version to an advisory and its stated affected range.
Vibe Bro’s heads-up
A scanner match needs contextual review, while no reported match is not proof that the application has no vulnerabilities.
The docs behind it
Documentation links checked .
Editorial review · October 28, 2026
Supported: Advisory ranges and scanner matches require context, and a clean match report does not prove absence of vulnerabilities.