You can now find the vulnerable open source libraries running in your applications and see which services load them. Atatus Application Security reads the libraries your services load through the Atatus APM agents for Node.js, Python and PHP and matches their versions to known CVEs.
Because detection comes from the agent you already run, each finding names the service and environment that run the vulnerable version, and shows the version that fixes it.
What you can do
- Check continuously: Libraries are checked against the Common Vulnerabilities and Exposures (CVE) list while your services run, so new findings appear without a separate scan.
- Prioritize by severity: Each finding shows its CVE and Common Vulnerability Scoring System (CVSS) score, so you can fix the most serious ones first.
- Know the fix: See the version to upgrade to for each vulnerable library.
- See every affected service: Find every service that loads a risky library, so you know what an upgrade will touch.
- Support compliance: Keep an up-to-date list of vulnerable libraries and their fixes to help meet security standards and regulatory requirements.