DE
Vendor
DependencyTrack
2 products with CVEs on record
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-64758
FR
frontend
DependencyTrack
4.8
0%
Nov 17@dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message
CVE-2025-61776
DE
dependency-track
DependencyTrack
4.7
0%
Oct 7Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org
CVE-2025-27137
DE
dependency-track
DependencyTrack
4.4
0%
Feb 24Dependency-Track vulnerable to local file inclusion via custom notification templates
CVE-2024-54002
DE
dependency-track
DependencyTrack
5.3
0%
Dec 4Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint
CVE-2022-39350
FR
frontend
DependencyTrack
5.4
1%
Oct 25@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
CVE-2022-39351
DE
dependency-track
DependencyTrack
4.4
0%
Oct 25Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions