DependencyTrack / DependencyTrack/dependency-track
Dependency tracker won't detect some vulnerability
Open
defect
in triage
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
Hi, I have 3 vulnerabilities that when scanned with Trivy in cli detect and show correctly, but when I upload the result into the dependency tracker either with Trivy or cyclonedx won’t show in the dependency tracker.
Here it is:
CVE-2021-22570
CVE-2023-5236
CVE-2023-5384
FYI: I’ve checked all of them seem to exist in NVD, and the database updated correctly.
Any idea?
DT version: 4.12.2
Contributor guide
Assessment
This issue has not been assessed yet.