Approved changes feed: RSS · Atom

cpe:2.3:a:owasp:dependency-check:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOwasp (b778b703-6f88-5eeb-b966-330b456a6d00)
ProductDependency Check (f64e42cd-18e0-5afa-a673-cbcdcbf8ca9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/owasp/dependency-check purl2cpe 2026-06-01 10:12:07.060732
pkg:github/jeremylong/dependencycheck purl2cpe 2026-06-01 10:12:07.060734
pkg:maven/org.owasp/dependency-check-parent purl2cpe 2026-06-01 10:12:07.060735

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-12036 vulnerable 2026-06-03 14:38:02.661754 Details available
OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.
Published: 2018-06-07T18:00:00.000Z
Updated: 2024-09-17T03:17:49.574Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.