DependencyTrack / Dependency-Track
4 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-61776 | Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org | MEDIUM | 4.7 | Oct 7, 2025 |
| CVE-2025-27137 | Dependency-Track vulnerable to local file inclusion via custom notification templates | MEDIUM | 4.4 | Feb 24, 2025 |
| CVE-2024-54002 | Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint | MEDIUM | 5.3 | Dec 4, 2024 |
| CVE-2022-39351 | Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions | MEDIUM | 4.4 | Oct 25, 2022 |
| CVE-2019-1020007 | Dependency-Track before 3.5.1 allows XSS. | MEDIUM | 5.4 | Jul 29, 2019 |
Showing 1 to 4 of 4 CVEs