Dependency-Check

OWASP tool that detects publicly disclosed vulnerabilities in project dependencies.

Overview

Features

Feature reference: Official Documentation

Release History

Source: https://github.com/jeremylong/DependencyCheck/releases

v12.1.0 — 2025-02-17 other

Version 12.1.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v12.0.2 — 2025-02-14 other

Version 12.0.2

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v12.0.1 — 2025-01-24 other

Version 12.0.1

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v12.0.0 — 2025-01-24 other

Version 12.0.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v11.1.1 — 2025-01-24 other

Version 11.1.1

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v11.1.0 — 2025-01-24 other

Version 11.1.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v11.0.0 — 2025-01-24 other

Version 11.0.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v10.0.4 — 2025-01-24 other

Version 10.0.4

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v10.0.3 — 2025-01-24 other

Version 10.0.3

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v10.0.2 — 2025-01-24 other

Version 10.0.2

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v10.0.1 — 2025-01-24 other

Version 10.0.1

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v10.0.0 — 2025-01-24 other

Version 10.0.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.2.0 — 2025-01-24 other

Version 9.2.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.1.0 — 2025-01-24 other

Version 9.1.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.10 — 2025-01-24 other

Version 9.0.10

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.9 — 2025-01-24 other

Version 9.0.9

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.8 — 2025-01-24 other

Version 9.0.8

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.7 — 2025-01-24 other

Version 9.0.7

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.6 — 2025-01-24 other

Version 9.0.6

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.5 — 2025-01-24 other

Version 9.0.5

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

v9.0.4 — 2025-01-24 bugfix

Version 9.0.4

• fix: utilize maven proxy if present (#6255)
• fix: allow api key in cli to be quoted (#6253)
• fix: use correct maven plugin reporting plugin (#6244)
• fix: correct trailing comma in JSON report (#6245)

See the full listing of changes.

v9.0.3 — 2025-01-24 bugfix

Version 9.0.3

• fix: use Java properties for proxy configuration (#6238)
• docs: update proxy configuration documentation (#6237)
• docs: add documentation on caching (#6204)
• docs: Clarify H2 database caching strategy (#6220)
• docs: Update list of supported report formats (#6224)
• docs: example 5 with new nvdDatafeedUrl parameter (#6215)
• fix: prevent NPEs (#6232 and #6206)
• fix: check valid for hours for NVD API (#6225)
• fix: correct NVD cache last checked logic (#6218)
• fix: nvd datafeed should process current year (#6213)
• fix: correct references to cvssv2 and cvssv3 fields in json and xml reports (#6212)
• fix: correct name on reference links in report (#6205)
• fix: flaws int the gitlab report (#6193)

See the full listing of changes.

v9.0.2 — 2025-01-24 bugfix

v9.0.2

• fix: remove virtual match string on NVD API Request (#6177)
• fix: correct meta data in report after switching the NVD API (#6154)
• fix: retry HTTP connections to NVD on 502 and 504 errors (#6151)
• fix: Gitlab report format needs severity capitalized (#6182)
• fix: improve JDK update version parsing (#6163)
• fix: mute JCS logging (again) (#6153)

See the full listing of changes.

v9.0.1 — 2025-01-24 bugfix

Version 9.0.1

• fix: check java 8 update version; minimum JRE is 8 update 251 (#6118)
• fix: add retry for failed NVD API requests (#6136)
• docs: add default values to documentation for the NVD API Delay (#6135)
• chore: Revert "build(deps): bump com.h2database:h2 from 2.1.214 to 2.2.224" (#6131)
• this is a breaking change for anyone that successfully created the H2 database with 9.0.0.
• fix: mute jcs logging (#6130)
• docs: update NVD notice (#6110)
• fix: Use the correct key for NVD API-Key from Maven Settings serverId (#6109)

See the full listing of changes.

v9.0.0 — 2025-01-24 bugfix

Version 9.0.0

breaking changes: See the upgrade notice

• feat: Utilize NVD API (#5978)
• feat: gitlab dependency scanner report format #5919 (#5920)
• fix: Use ASCII apostrophe for console message (#6076)

See the full listing of changes.

v8.4.3 — 2025-01-24 bugfix

Version 8.4.3

• fix: bump jcs3 (#6047)
• docs: Corrected docs on hostedSuppressions (#6035)

See the full listing of changes.

v8.4.2 — 2025-01-24 bugfix

Version 8.4.2

• fix: correct log configuration in cli (#6002)

See the full listing of changes.

v8.4.1 — 2025-01-24 bugfix

Version 8.4.1

• fix: upgrade to JCS3 (#5114)
• fix: Support ~= version specifier in requirements.txt and pipfile (#5902)
• fix: Version of dependency no longer ignored when CPE product has a 'java' suffix in a product name (#5901)
• fix: Do not filter out evidences added by hints (#5900)
• fix: fixes FP #5925 (#5927)

See the full listing of changes.

v8.4.0 — 2025-01-24 bugfix

Version 8.4.0

Added

• feat: Add support for Nexus v3 to NexusAnalyzer (#5849)

Fixed

• fix: Hint Analyzer should run before VersionFilter Analyzer (#5818)
• chore: switch to sha1-pinning as suggested by Semgrep
• fix: OSS Index Analyzer SocketTimeoutException exception handling based on warn only parameter (#5845)
• fix: use curl with -L to follow github redirect (#5808)
• fix: use curl with -L to follow github redirect
• fix: #5671 out of memory error (#5789)
• fix: #5671 Exit method as soon as we detect a loop to prevent an infinite loop leading to an OutOfMemoryError

v8.3.1 — 2025-01-24 feature

Version 8.3.1

Re-release of 8.3.0 as 8.3.1.

Generated at 2026-07-10 22:23 UTC