Product

org.owasp/dependency-check-cli vulnerabilities

1 published CVE affecting org.owasp/dependency-check-cli, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.owasp/dependency-check-cli CVEs

Newest publication first

CVE-2024-23686 DependencyCheck Debug Mode Logging of NVD API Key
Published 2024-01-19

MediumCVSS 5.3 EPSS 0.60%

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.owasp/dependency-check-cli vulnerabilities

Latest org.owasp/dependency-check-cli CVEs

CVE-2024-23686 DependencyCheck Debug Mode Logging of NVD API Key