Finding and Addressing Vulnerable and Outdated Web Application Components

This guidance explains how testers and organizations should identify, assess, and remediate vulnerable or outdated third-party web components (e.g., jQuery, Angular, Bootstrap). It covers manual inspection techniques and tools (Burp Suite, browser developer tools, Wappalyzer, Snyk), searching for known vulnerabilities by component/version, and recommends patching, removal, or replacement as remediation steps to reduce web application attack surface.