Dependencytrack Dependency-track vulnerabilities
- dependencytrack dependency-track Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org 4.7 Medium
- dependencytrack dependency-track Dependency-Track vulnerable to local file inclusion via custom notification templates 4.4 Medium
- dependencytrack dependency-track Dependency-Track allows enumeration of managed users via /api/v1/user/login endpoint 5.3 Medium
- dependencytrack dependency-track Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions 4.4 Medium
- dependency-track Dependency-Track before 3.5.1 allows XSS. 5.4 Medium