DependencyCheck Versions Save

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

v9.1.0

3 weeks ago

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.10

1 month ago

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.9

3 months ago

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.8

3 months ago

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.7

4 months ago

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.6

4 months ago

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.5

4 months ago

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.4

4 months ago
  • fix: utilize maven proxy if present (#6255)
  • fix: allow api key in cli to be quoted (#6253)
  • fix: use correct maven plugin reporting plugin (#6244)
  • fix: correct trailing comma in JSON report (#6245)

See the full listing of changes.

v9.0.3

4 months ago
  • fix: use Java properties for proxy configuration (#6238)
  • docs: update proxy configuration documentation (#6237)
  • docs: add documentation on caching (#6204)
  • docs: Clarify H2 database caching strategy (#6220)
  • docs: Update list of supported report formats (#6224)
  • docs: example 5 with new nvdDatafeedUrl parameter (#6215)
  • fix: prevent NPEs (#6232 and #6206)
  • fix: check valid for hours for NVD API (#6225)
  • fix: correct NVD cache last checked logic (#6218)
  • fix: nvd datafeed should process current year (#6213)
  • fix: correct references to cvssv2 and cvssv3 fields in json and xml reports (#6212)
  • fix: correct name on reference links in report (#6205)
  • fix: flaws int the gitlab report (#6193)

See the full listing of changes.

v9.0.2

4 months ago
  • fix: remove virtual match string on NVD API Request (#6177)
  • fix: correct meta data in report after switching the NVD API (#6154)
  • fix: retry HTTP connections to NVD on 502 and 504 errors (#6151)
  • fix: Gitlab report format needs severity capitalized (#6182)
  • fix: improve JDK update version parsing (#6163)
  • fix: mute JCS logging (again) (#6153)

See the full listing of changes.