Log in Start free

DependencyTrack

Products

ProductCVEsExploitedLatest
dependency-track4–Oct 7, 2025
frontend2–Nov 17, 2025

Exploited and recent CVEs

  • CVE-2025-64758 Medium 4.8 @dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message 0.2%
  • CVE-2025-61776 Medium 4.7 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org 0.3%
  • CVE-2025-27137 Medium 4.4 Dependency-Track vulnerable to local file inclusion via custom notification templates 0.2%
  • CVE-2024-54002 Medium 5.3 Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint 0.3%
  • CVE-2022-39351 Medium 4.4 Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions 0.2%
  • CVE-2022-39350 Medium 5.4 @dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details 0.9%