implementing-patch-management-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches and parses vulnerability reports and feeds from external services such as Tenable.io, Qualys, and the CISA KEV catalog, which can contain outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script fetches vulnerability data from CISA KEV over HTTPS, which constitutes a weak, unauthenticated public dependency for runtime advisory checks.