Advisories · Technology
DependencyTrack dependency-track.
Every CVE that names DependencyTrack dependency-track among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.7 Medium
Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org
- DependencyTrack dependency-track
- Hard-coded credentials
- CVSS 4.4 Medium
Dependency-Track vulnerable to local file inclusion via custom notification templates
- DependencyTrack dependency-track
- Path traversal
- CVSS 5.3 Medium
Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint
- DependencyTrack dependency-track
- Information disclosure
- CVSS 4.4 Medium
Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions
- DependencyTrack dependency-track
- Information disclosure