DE
Vendor
DependencyTrack
6
CVEs
0
On KEV
0
New 30D
Products
DE5.3
dependency-track
DependencyTrack
4 CVEs0 on KEV0 new
FR5.4
frontend
DependencyTrack
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-64758 | FR frontend DependencyTrack | 4.8 | Nov 17 | @dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message |
| CVE-2025-61776 | DE dependency-track DependencyTrack | 4.7 | Oct 7 | Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org |
| CVE-2025-27137 | DE dependency-track DependencyTrack | 4.4 | Feb 24 | Dependency-Track vulnerable to local file inclusion via custom notification templates |
| CVE-2024-54002 | DE dependency-track DependencyTrack | 5.3 | Dec 4 | Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint |
| CVE-2022-39350 | FR frontend DependencyTrack | 5.4 | Oct 25 | @dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details |
| CVE-2022-39351 | DE dependency-track DependencyTrack | 4.4 | Oct 25 | Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions |
