DependencyTrack / DependencyTrack/dependency-track

Externally Identified Vulnerabilities Not found in Dependency-Track

Open
#5,154 0 comments 0 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Hello, I identified vulnerabilities in these components through external research; however, they are not identified by Dependency-Track :

avro-cpp (1.11.3)
bcpkix-jdk15on (1.70)
bcutil-jdk15on (1.70)
com.ibm.mq.allclient (9.2.5.0)
gsoap (2.8.129)
ibm-mq-xms (3.0.0.1)
javax.jms-api (2.0.1)
librdkafka (1.9.2)
ojdbc8 (19.18.0.0)
openssl (3.0.12)
python (3.8.0)

Best Regards,

### Steps to Reproduce

1. looking in dependency track for these components.

### Expected Behavior

finding vulnerabilities in these components

### Dependency-Track Version

4.11.x

### Dependency-Track Distribution

Executable WAR

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.