DependencyTrack dependency-track

• CVE-2025-61776 Medium 4.7 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org 0.3%
• CVE-2025-27137 Medium 4.4 Dependency-Track vulnerable to local file inclusion via custom notification templates 0.2%
• CVE-2024-54002 Medium 5.3 Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint 0.3%
• CVE-2022-39351 Medium 4.4 Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions 0.2%