Issues

• mTLS support for nvdDataFeed, retireJsUrl, kevURL

  coreenhancement
  Feature

  dependency-check/DependencyCheck#8824 · Filter by author xmito opened on Oct 1, 2026
  1

• OSSIndexAnalyzer cannot parse some CVSS vector strings

  ossindex
  Bug

  dependency-check/DependencyCheck#8763 · Filter by author chadlwilson opened on Aug 22, 2026
  1

  

• CENTRAL - NODEAUDIT - POM Cached results never expire

  bug
  dependency-check/DependencyCheck#8757 · Filter by author ejouvin opened on Aug 20, 2026
  7

• Maven: test dependencies sometimes missing when executing with "-T1C"

  bugmavenpending more information
  dependency-check/DependencyCheck#8755 · Filter by author theit opened on Aug 19, 2026
  5

• Clarification on CVE Reporting Changes in OWASP Dependency-Check

  centralmavenquestion
  dependency-check/DependencyCheck#8737 · Filter by author pbhuvanacs opened on Aug 14, 2026
  5

• ODC does not shut down connection pools/threads cleanly after some types of failures

  bugcore
  Bug

  dependency-check/DependencyCheck#8622 · Filter by author chadlwilson opened on Jun 19, 2026
  5

• Dependency vulnerability scan does not report CVE-2026-40973, but reports newer CVE-2026-4258

  enhancementnvdquestion
  dependency-check/DependencyCheck#8609 · Filter by author dangkhoaphung opened on Jun 12, 2026
  4

  

• Yarn Berry analyzer does not report vulnerability score

  enhancementnpm
  Feature

  dependency-check/DependencyCheck#8571 · Filter by author marcelstoer opened on Jun 4, 2026
  7

• use CPE update and edition fields to derive matching version to reduce FP

  enhancementnvd
  Feature

  dependency-check/DependencyCheck#8554 · Filter by author chadlwilson opened on May 27, 2026
  2

• [FP]: CVE-2026-33117 reported against unrelated Azure libraries

  enhancementFP Reportmaven
  dependency-check/DependencyCheck#8553 · Filter by author JackPGreen opened on May 27, 2026
  2

• [FP]: gRPC-Go CVE-2026-33186 reported against grpc-binary Swift Package Manager library

  enhancementFP Report
  dependency-check/DependencyCheck#8513 · Filter by author kapitoshka438 opened on May 18, 2026
  5

• [FP]: CVE-2025-10492 reported on jasperreports-7.0.6.jar

  enhancementFP Reportmaven
  dependency-check/DependencyCheck#8501 · Filter by author SergeS opened on May 12, 2026
  3

• [FP]: Old Java CVEs reported against recent OpenJFX Swing integration artifact

  enhancementFP Reportmavennvd
  dependency-check/DependencyCheck#8482 · Filter by author beth-soptim opened on May 6, 2026
  7

  

• OWASP Dependency Check for Go

  enhancementquestion
  Feature

  dependency-check/DependencyCheck#8470 · Filter by author dgt-amexio opened on Apr 30, 2026
  4

• When the NVD service fails, the retries have no backoff

  enhancementnvd
  dependency-check/DependencyCheck#8469 · Filter by author seancorfield opened on Apr 29, 2026
  11

  

• Remove legacy NodeAuditAnalyzer dependency on NPM audit legacy /quick API

  npm
  Feature

  dependency-check/DependencyCheck#8422 · Filter by author chadlwilson opened on Apr 15, 2026
  23

  

• Refactoring dependency version resolution in AssemblyAnalyzer

  core
  Task

  dependency-check/DependencyCheck#8357 · Filter by author nhumblot opened on Mar 8, 2026
  

• Allow to suppress by file path from report

  coreenhancement
  Feature

  dependency-check/DependencyCheck#8350 · Filter by author kwin opened on Mar 6, 2026
  6

• Proposal: Contributor Architecture Overview Documentation

  documentationenhancement
  dependency-check/DependencyCheck#8304 · Filter by author Charanbhogavalli opened on Feb 15, 2026
  5

• Ability to look for unused suppressions more precisely

  enhancement
  dependency-check/DependencyCheck#8197 · Filter by author thomasredlin opened on Dec 17, 2025
  3

• Add support for Azure Artifacts as an alternative to Central Analyzer (similar to Nexus/Artifactory)

  centralenhancementmaven
  dependency-check/DependencyCheck#8126 · Filter by author twrb opened on Nov 12, 2025
  3

• CVSS v4 data is missing for source NPM in HTML and JSON reports

  enhancementnpm
  dependency-check/DependencyCheck#7941 · Filter by author thomasredlin opened on Sep 22, 2025
  7

• Replace the Legacy search.maven.org usage in Dependency download with Portal central.sonatype.com

  centralenhancementpending more information
  dependency-check/DependencyCheck#7889 · Filter by author nico-arianto opened on Aug 26, 2025
  19

• SonaType Nexus' Node Audit API incompatible (Not in GZIP format)?

  enhancement
  dependency-check/DependencyCheck#7655 · Filter by author rossi-fi opened on May 22, 2025
  4

• feat: allow secrets to be passed via environment variables

  enhancement
  dependency-check/DependencyCheck#7642 · Filter by author jeremylong opened on May 14, 2025
  2