OASB
Attacks/Supply Chain/SUP-007
HIGHCWE-829

SUP-007 Transitive Dependency Path Traversal

Supply Chain: Attempts to compromise agent dependencies through supply chain attacks

Description

Exploits fetch_data to traverse paths and access sensitive files

Remediation

Verify CVE references against official databases.

Severity

HIGH

OASB Control

6.2

CWE

CWE-829
PreviousSUP-006 Build Script Injection via Secret StoreNextSUP-008 Registry Redirect to Attacker Server