EUVD-2022-41821

Malicious code in bioql PyPI...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

Dependency-Track 安全漏洞

Dependency-Track is an intelligent supply chain component analysis platform for identifying third-party component risks. A security vulnerability exists in Dependency-Track versions prior to 4.6.0, which stems from the fact that executing an API request with a valid API key with insufficient...

The vulnerability in the HTTP Server TCP/IP stack of Track allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the HTTP Server TCP/IP stack in Track involves insufficient validation of input data during packet processing. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code...