DependencyTrack dependency-track vulnerabilities
4 published CVEs name DependencyTrack dependency-track among the affected products.
- 4Published CVEs4 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-61776
Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org
DependencyTrack · dependency-track
Medium4.7 - CVE-2025-27137
Dependency-Track vulnerable to local file inclusion via custom notification templates
DependencyTrack · dependency-track
Medium4.4 - CVE-2024-54002
Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint
DependencyTrack · dependency-track
Medium5.3 - CVE-2022-39351
Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions
DependencyTrack · dependency-track
Medium4.4