HValdez344285 (Community Member) asked a question.
Can suggestions to upgrade "outdated libraries" to alpha or beta versions be omitted as potential flaws of the system?
Hi, Veracode team! We wonder why dependency upgrades to alpha or beta versions of a library are suggested to fix an "outdated library", when –from our perspective– experimental versions are usually more exposed to vulnerabilities.
.png){kind=logo}
Hello @HValdez344285 (Community Member) ,
With SCA, when a verison is recommended is normally an up-to-date one or versions that are considered secure. There is a functionality that ignores reporting on updated versions in the UI, but will also prevent you from being notified in the future if there is a different version recommendation.
This is a good candidate for Idea submission, where you can suggest product functionality directly to our product managers. Please do a search first to see if an idea for this topic already exists (if so, can Upvote it) and if not, create one!
Jason
Veracode Support Engineer.