152 matches found
CVE-2025-67030 vulnerabilities
Vulnerabilities for packages: dependency-track, gradle, confluent-kafka-jre-bcfips, logstash, maven, clojure-tools, druid, maven-ecosystems-test, wso2is, dependency-track-apiserver, confluent-kafka, apache-camel-karavan-devmode, kafka, maven-stage0, akhq, gradle-stage0, leiningen, kafka-fips...
CVE-2025-11143 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, confluent-kafka, druid, apache-tika, dependency-track, cassandra-reaper, akhq, solr, zookeeper, cloudwatch-exporter, trino, kafka, spark...
GHSA-WJPW-4J6X-6RWH vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, confluent-kafka, druid, apache-tika, dependency-track, cassandra-reaper, akhq, solr, zookeeper, cloudwatch-exporter, trino, kafka, spark...
CVE-2025-11143 vulnerabilities
Vulnerabilities for packages: apache-tika-fips, confluent-kafka-jre-bcfips, solr, celeborn, cruise-control, reposilite, pinot-fips, cruise-control-fips, trino, strimzi-kafka-operator-fips, apache-hop-fips, cloudwatch-exporter, dependency-track-apiserver, confluent-kafka, kafka,...
GHSA-WJPW-4J6X-6RWH vulnerabilities
Vulnerabilities for packages: apache-tika-fips, confluent-kafka-jre-bcfips, solr, celeborn, cruise-control, reposilite, pinot-fips, cruise-control-fips, trino, strimzi-kafka-operator-fips, apache-hop-fips, cloudwatch-exporter, dependency-track-apiserver, confluent-kafka, kafka,...
GHSA-72HV-8253-57QQ vulnerabilities
Vulnerabilities for packages: ruby3.3-jrjackson, ruby3.4-jrjackson, apache-nifi, cass-config-builder, jenkins-plugin-manager, scala, confluent-kafka, neo4j, akhq, dependency-track, cassandra, management-api-for-apache-cassandra-5.0, zookeeper, spark, zipkin, wavefront-proxy, apache-nifi-registry,...
GHSA-72HV-8253-57QQ vulnerabilities
Vulnerabilities for packages: confluent-kafka-jre-bcfips, elasticsearch-fips, solr, celeborn, reposilite, gradle, hadoop-client-modules, trino, ruby3.2-jrjackson, akhq, spdx-tools-java, camunda, apache-tika, py3-vllm-cuda-12.4, flyway, zipkin, apache-hop, commercial-elasticsearch, nacos,...
CVE-2025-1686 vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2023-22102 vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-P75G-CXFJ-7WRX vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-M6VM-37G8-GQVH vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2025-1686 vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-M6VM-37G8-GQVH vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2023-22102 vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-P75G-CXFJ-7WRX vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2025-64758
@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...
CVE-2025-64758
@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...
GHSA-7XVH-C266-CFR5 @dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via welcome message
Description Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission can configure a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not...
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via welcome message
Description Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission can configure a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not...
CVE-2025-64758
CVE-2025-64758 affects Dependency-Track frontend (SPA). From 4.12.0 up to before 4.13.6, administrators with SYSTEM_CONFIGURATION could configure a login-page welcome message that was not properly sanitized, allowing arbitrary JavaScript to execute in users’ browsers. The issue results in a persi...