DE
Product
dependency-track
4
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add dependency-track to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54002 | 5.3 | Dec 4 | Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint Affected: < 4.12.2 |
| CVE-2025-61776 | 4.7 | Oct 7 | Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org Affected: < 4.13.5 |
| CVE-2025-27137 | 4.4 | Feb 24 | Dependency-Track vulnerable to local file inclusion via custom notification templates Affected: < 4.12.6 |
| CVE-2022-39351 | 4.4 | Oct 25 | Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions Affected: < 4.6.0 |
Showing 4