What’s Vulnerable › Products

DependencyTrack dependency-track vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your DependencyTrack dependency-track version is affected

Latest DependencyTrack dependency-track vulnerabilities

• CVE-2025-61776 — Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org (CVSS 4.7)
• CVE-2025-27137 — Dependency-Track vulnerable to local file inclusion via custom notification templates (CVSS 4.4)
• CVE-2022-39351 — Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions (CVSS 4.4)
• CVE-2019-1020007 — (CVSS 5.4)