Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-1020007
Description
Dependency-Track before 3.5.1 allows XSS.
DependencyTrack/dependency-track
GitHubDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
GitHubDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.< 3.5.1NVD