US 11,893,120 B1
Apparatus and method for efficient vulnerability detection in dependency trees
Joshua Holden Jennings, South Royalton, VT (US)
Assigned to SOOS LLC
Filed by SOOS LLC, Winooski, VT (US)
Filed on Sep. 8, 2022, as Appl. No. 17/940,188.
Int. Cl. G06F 21/57 (2013.01); G06F 8/71 (2018.01); G06F 8/41 (2018.01)
CPC G06F 21/577 (2013.01) [G06F 8/433 (2013.01); G06F 8/71 (2013.01)] 18 Claims
OG exemplary drawing
 
1. An apparatus for scanning vulnerabilities, wherein the apparatus comprises:
at least a processor; and
a memory communicatively connected to the at least a processor, the memory containing instructions configuring the at least a processor to:
access at least a manifest file, wherein the at least a manifest file comprises at least a direct dependency;
scan the manifest file for software package data;
extract the software package data from the manifest file, wherein the software package data comprises a plurality of software package vulnerabilities, wherein the plurality of software package vulnerabilities comprises at least a memory safety violation;
generate at least a dependency tree as a function of the software package data; and
store the at least a dependency tree in a database, wherein the storing further comprises storing a software vulnerability count.