Component Detail
Component Detail gives you a full view of a single software component — including the supply chain attack campaigns targeting it, its CVE vulnerabilities, and which assets in your organization are affected.
To open it, click any component name in SBOM Inventory.
The header shows the component name in Name@Version format and an Ecosystem badge. Click ← Back to return to SBOM Inventory.
Supply Chain Attacks
The Supply Chain Attacks tab is shown by default when you open Component Detail.
Each row is an attack campaign linked to this component:
| Column | Description |
|---|---|
| Campaign Name | Campaign name. Click to open the reference page in a new tab. |
| Recommended Fix | Remediation guidance. Truncated after 2 lines — hover to read in full. |
| Registry | Package registry containing the affected component. |
| Malicious Dependency | The compromised dependency, if identified. Shown as - when not applicable. |
| Published At | Date published (dd/MM/yyyy). |
Default sort: Published At descending. If there are no campaigns, the tab shows No Data.
Filter and search:
- Filter by registry: select from Select registry.
- Search by campaign name or malicious dependency: type in the search field and press Enter.
Vulnerabilities
- Click the Vulnerabilities tab.
Each row is a CVE affecting this component:
| Column | Description |
|---|---|
| Severity | Severity level: Critical / High / Medium / Low. |
| CVE ID | CVE identifier. Click to open the CVE reference in a new tab. |
| Description | Vulnerability description. Truncated after 2 lines — hover to read in full. |
| Fixed In | Version(s) that fix the CVE, comma-separated. Shown as - if no fix is available. |
| Exploited In The Wild | Warning icon if this CVE has confirmed real-world exploitation. |
| Public PoC | Icon if a public proof-of-concept exploit exists. |
Default sort: Severity Score descending.
Prioritize CVEs marked Exploited In The Wild or with a Public PoC regardless of severity score — these carry active exploitation risk.
Filter and search:
- Filter by severity: select from Select severity.
- Filter by exploitation status: select from Select exploited.
- Filter by PoC availability: select from Select Public POC.
- Search by CVE ID or description: type in the search field and press Enter.
Affected Assets
- Click the Affected Assets tab.
Each row is an asset that uses this component:
| Column | Description |
|---|---|
| Asset Name | Repository: full path and branch. Container image: image path and version. Hover over truncated names to see the full value. |
| Integration Type | GitHub, GitLab, GitLab Server, Harbor, or FPT Container Registry. |
| Last Scanned At | Most recent scan timestamp (dd/MM/yyyy HH:mm:ss). |
Default sort: Last Scanned At descending.
A higher Affected Assets count means the component is more widely used across your organization. Combine this with the Exploited In The Wild flag to prioritize which components to remediate first.
Filter and search:
- Filter by integration type: select from Select integration type.
- Search by asset name: type in the search field and press Enter.