CVE-2025-61776 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

CVE-2025-61776

Dependency-Track prior to version 4.13.5 is affected by a credential leakage vulnerability where credentials intended for a private NuGet repository can be sent to api.nuget.org via the HTTP Authorization header, and names/versions of internal components can be disclosed to api.nuget.org. This sc...

CVE-2025-61776 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

EUVD-2003-1556

Malware in sbrugna...

EUVD-2010-1535

Malware in sbrugna...

EUVD-2014-4792

Malware in sbrugna...

EUVD-2021-1823

Malware in sbrugna...

EUVD-2018-9237

Malware in sbrugna...

EUVD-2015-5605

Malware in sbrugna...

EUVD-2021-21649

Malware in sbrugna...

EUVD-2007-2811

Malware in sbrugna...

EUVD-2016-3590

Malware in sbrugna...

EUVD-2019-2394

Malware in sbrugna...

EUVD-2015-1396

Malware in sbrugna...

EUVD-2019-2055

Malware in sbrugna...

EUVD-2017-14491

Malware in sbrugna...

EUVD-2021-21648

Malware in sbrugna...

Dependency-Track 安全漏洞

Dependency-Track is Dependency-Track's open source suite of intelligent supply chain component analysis platforms for identifying third-party component risks. A security vulnerability exists in Dependency-Track versions prior to 4.13.5, which stems from the possibility of sending private NuGet...

CVE-2025-61776: Insufficiently Protected Credentials

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-392013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-392013 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ES...