VendorsOWASPdependency-trackall versions
Vulnerabilities

OWASP Dependency-Track

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2019-1020007
Dependency-Track before 3.5.1 allows XSS.
Published 2019-07-29 · Modified
5.4EPSS 0.006
CVE-2022-39351
Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions
Published 2022-10-25 · Modified
4.4EPSS 0.002