Skip to content
OpenAdvisories

Product · DependencyTrack

frontend

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-64758

    @dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message

    @dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users …

    DependencyTrack frontend @dependencytrack/frontend npm
  • Medium 5.4
    CVE-2022-39350

    @dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details

    @dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Due to the common practice of providing vulne…

    DependencyTrack frontend @dependencytrack/frontend npm