DependencyTrack vulnerabilities
6 published CVEs name DependencyTrack among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-64758
@dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message
DependencyTrack · frontend
Medium4.8 - CVE-2025-61776
Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org
DependencyTrack · dependency-track
Medium4.7 - CVE-2025-27137
Dependency-Track vulnerable to local file inclusion via custom notification templates
DependencyTrack · dependency-track
Medium4.4 - CVE-2024-54002
Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint
DependencyTrack · dependency-track
Medium5.3 - CVE-2022-39351
Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions
DependencyTrack · dependency-track
Medium4.4 - CVE-2022-39350
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
DependencyTrack · frontend
Medium5.4