DependencyTrack / DependencyTrack/frontend
A critical vulnerabilities is displayed on the Audit Vulnerabilities tab, but is not included in the Overview tab.
- Dominant language
- Vue
- Stars
- 171
- Forks
- 250
- Avg merge
- 10h 56m
- Merged PRs (30d)
- 84
Description
### Current Behavior
A critical vulnerabilities is displayed in the Audit Vulnerabilities tab, but is not included in the Overview tab.
In this case, this concerns three vulnerabilities:
CVE-2026-42581
CVE-2026-42584
CVE-2026-42579
https://nvd.nist.gov/vuln/detail/CVE-2026-42581
https://nvd.nist.gov/vuln/detail/CVE-2026-42584
https://nvd.nist.gov/vuln/detail/CVE-2026-42579
Package URL (PURL): pkg:maven/io.netty/netty-codec-http@4.1.130.Final
This issue is inconvenient because you cannot rely on the Overview tab or Projects, as it is unclear whether there are critical vulnerabilities in this project.
### Steps to Reproduce
1. Create a custom project.
2. Upload the pkg:maven/io.netty/netty-codec-http@4.1.130.Final package to the project.
3. I use trivy analyzer for my projects.
### Expected Behavior
On the Overview tab, vulnerability summaries are correctly performed to ensure correct response to critical vulnerabilities.
### Dependency-Track Frontend Version
4.7.x
### Browser
Google Chrome
### Browser Version
_No response_
### Operating System
Windows
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this defect was already reported
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.