---
id: CVE-2024-23686
title: >-
  DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and
  for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker
  to recover the NVD API Key from a log file.
summary: >-
  DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and
  for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker
  to recover the NVD API Key from a log file.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-532
  - CWE-532
vendor: owasp
product: dependency-check
affected:
  - 'dependency-check >= 9.0.0, <= 9.0.5'
  - 'dependency-check >= 9.0.0, < 9.0.6'
patched:
  - dependency-check 9.0.6
published: '2024-01-19'
updated: '2026-07-14'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-23686'
references:
  - url: 'https://github.com/advisories/GHSA-qqhq-8r2c-c3f5'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/jeremylong/DependencyCheck/security/advisories/GHSA-qqhq-8r2c-c3f5
    label: disclosure@vulncheck.com
  - url: 'https://vulncheck.com/advisories/vc-advisory-GHSA-qqhq-8r2c-c3f5'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/advisories/GHSA-qqhq-8r2c-c3f5'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://github.com/jeremylong/DependencyCheck/security/advisories/GHSA-qqhq-8r2c-c3f5
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://vulncheck.com/advisories/vc-advisory-GHSA-qqhq-8r2c-c3f5'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00603
epssPercentile: 0.47574
ingestedAt: '2026-07-14T23:40:04.988Z'
---

## Overview

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

## Affected

- `dependency-check >= 9.0.0, <= 9.0.5`
- `dependency-check >= 9.0.0, < 9.0.6`

## Remediation

Upgrade past the affected range:

- `dependency-check 9.0.6`