153 matches found
GHSA-6FMV-XXPF-W3CW vulnerabilities
Vulnerabilities for packages: akhq, dependency-track-apiserver, apache-camel-karavan-devmode, gradle-stage0, logstash, dependency-track, maven-ecosystems-test, confluent-kafka, druid, kafka, maven, maven-stage0, wso2is, confluent-kafka-jre-bcfips, kafka-fips, leiningen, gradle, clojure-tools...
CVE-2025-67030 vulnerabilities
Vulnerabilities for packages: akhq, dependency-track-apiserver, apache-camel-karavan-devmode, gradle-stage0, logstash, dependency-track, maven-ecosystems-test, confluent-kafka, druid, kafka, maven, maven-stage0, wso2is, confluent-kafka-jre-bcfips, kafka-fips, leiningen, gradle, clojure-tools...
CVE-2025-11143 vulnerabilities
Vulnerabilities for packages: confluent-kafka, zookeeper, akhq, cloudwatch-exporter, dependency-track, druid, strimzi-kafka-operator, apache-tika, solr, trino, kafka, cassandra-reaper, spark...
GHSA-WJPW-4J6X-6RWH vulnerabilities
Vulnerabilities for packages: confluent-kafka, zookeeper, akhq, cloudwatch-exporter, dependency-track, druid, strimzi-kafka-operator, apache-tika, solr, trino, kafka, cassandra-reaper, spark...
CVE-2025-11143 vulnerabilities
Vulnerabilities for packages: dependency-track-apiserver, kayenta-fips, cassandra-reaper, cloudwatch-exporter, druid, apache-hop, cruise-control-fips, kafka-fips, strimzi-kafka-operator-fips, zaproxy, kafka, akhq, solr, cruise-control, confluent-kafka, apache-tika-fips, dependency-track, spark,...
GHSA-WJPW-4J6X-6RWH vulnerabilities
Vulnerabilities for packages: dependency-track-apiserver, kayenta-fips, cassandra-reaper, cloudwatch-exporter, druid, apache-hop, cruise-control-fips, kafka-fips, strimzi-kafka-operator-fips, zaproxy, kafka, akhq, solr, cruise-control, confluent-kafka, apache-tika-fips, dependency-track, spark,...
GHSA-72HV-8253-57QQ vulnerabilities
Vulnerabilities for packages: apache-nifi, zookeeper, cass-config-builder, apache-pulsar, ruby4.0-jrjackson, management-api-for-apache-cassandra-5.0, solr, ruby3.4-jrjackson, sonarqube, thingsboard, trino, jenkins-plugin-manager, celeborn, opensearch, gradle-stage0, gradle, jenkins, flyway,...
GHSA-72HV-8253-57QQ vulnerabilities
Vulnerabilities for packages: kayenta-fips, zipkin, nuxeo, logstash, kafka, management-api-for-apache-cassandra-4.1, apicurio-registry, knative-kafka-broker, cassandra, infinispan, logstash-fips, kayenta, cass-config-builder-fips, zookeeper-fips, py3-vllm-cuda-12.4, opensearch, apache-hop-fips,...
CVE-2025-1686 vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2023-22102 vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-M6VM-37G8-GQVH vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-P75G-CXFJ-7WRX vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2025-1686 vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2023-22102 vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-M6VM-37G8-GQVH vulnerabilities
Vulnerabilities for packages: dependency-track...
GHSA-P75G-CXFJ-7WRX vulnerabilities
Vulnerabilities for packages: dependency-track...
CVE-2025-64758
@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...
CVE-2025-64758
@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...
GHSA-7XVH-C266-CFR5 @dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via welcome message
Description Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission can configure a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not...
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via welcome message
Description Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission can configure a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not...