List view

Implement Support for Project Policies

enhancementNew feature or requestNew feature or request

Status: Open.

#2130 In DependencyTrack/dependency-track;

· msymons opened on Nov 6, 2022

Ability to create a policy condition based on "Attributed on" value.

enhancementNew feature or requestNew feature or request

Status: Open.

#3629 In DependencyTrack/dependency-track;

· margusanvelt opened on Apr 18, 2024

Make use of "Last BOM Import" as input for Policy engine

enhancementNew feature or requestNew feature or request

p3Nice-to-have featuresNice-to-have features

Status: Open.

#2052 In DependencyTrack/dependency-track;

· msymons opened on Oct 16, 2022

CBOM: Add CycloneDX v1.6 support for cryptographic assets

cdx-1.6Related to CycloneDX specification v1.6Related to CycloneDX specification v1.6

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

Status: Open.

#3145 In DependencyTrack/dependency-track;

· stevespringett opened on Oct 26, 2023

Support CEL based Expression for Detecting Internal Components

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

size/MMedium effortMedium effort

Status: Open.

#3910 In DependencyTrack/dependency-track;

· VinodAnandan opened on Jul 2, 2024

Implement EPSS Scaling (Total Threat for Component or Project or Portfolio)

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

Status: Open.

#2512 In DependencyTrack/dependency-track;

· msymons opened on May 27, 2022

BOM Retention Policy

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

Status: Open.

#877 In DependencyTrack/dependency-track;

· msymons opened on Dec 17, 2020

Version Distance Policy Evaluation Cannot Deal With Letters

defectSomething isn't workingSomething isn't working

Status: Open.

#3230 In DependencyTrack/dependency-track;

· msymons opened on Nov 24, 2023

Allow /api/v1/project/lookup to return project with no version

api-inconsistency

enhancementNew feature or requestNew feature or request

Status: Open.

#4914 In DependencyTrack/dependency-track;

· rkg-mm opened on May 4, 2025

OpenAPI PUT api/v1/component/project/{project_uuid} - Wrong Requestbody scheme

api docs

api-inconsistency

Status: Open.

#5130 In DependencyTrack/dependency-track;

· AndreasIgelCC opened on Jul 23, 2025

Portfolio access control doesn't work when a user is member of different teams with different ACL's/projects

access control

defectSomething isn't workingSomething isn't working

size/XLHigher effortHigher effort

Status: Open.

#5295 In DependencyTrack/dependency-track;

· jkvbe opened on Sep 11, 2025

More endpoints that use DELETE with body

api-inconsistency

defectSomething isn't workingSomething isn't working

Status: Open.

#5193 In DependencyTrack/dependency-track;

· jakub-bochenski opened on Aug 8, 2025

Add End-of-life (EOL) / End-of-support (EOS) information for components

enhancementNew feature or requestNew feature or request

Status: Open.

#3108 In DependencyTrack/dependency-track;

· hvardhan20 opened on Oct 17, 2023

OWASP scores should be per-component, not global, to support contextual VEX ratings

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

Status: Open.

#5796 In DependencyTrack/dependency-track;

· fahedouch opened on Feb 10, 2026

Add CEL function to check if component is a direct dependency of project root

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

size/SSmall effortSmall effort

Status: Open.

#6184 In DependencyTrack/dependency-track;

· WissemChb opened on Apr 8, 2026

Add isDirect flag in COMPONENT for efficient direct/transitive dependency filtering

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

size/SSmall effortSmall effort

Status: Open.

Enhancement

#6183 In DependencyTrack/dependency-track;

· sahibamittal opened on May 15, 2026

Export option on components search

enhancementNew feature or requestNew feature or request

p3Nice-to-have featuresNice-to-have features

size/MMedium effortMedium effort

Status: Open.

#6185 In DependencyTrack/dependency-track;

· sahibamittal opened on Mar 9, 2026

Remove Kenna Security Integration in June 2028

enhancementNew feature or requestNew feature or request

needs milestoneIssues or PRs that are pending a milestone assignmentIssues or PRs that are pending a milestone assignment

size/SSmall effortSmall effort

Status: Open.

#6186 In DependencyTrack/dependency-track;

· stevespringett opened on Jan 8, 2026

Extend PluginManager to support loading of plugins from JARs

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

size/MMedium effortMedium effort

Status: Open.

#6187 In DependencyTrack/dependency-track;

· nscuro opened on Sep 17, 2025

Normalize permission model

breaking change

enhancementNew feature or requestNew feature or request

size/LHigh effortHigh effort

Status: Open.

#6189 In DependencyTrack/dependency-track;

· nscuro opened on Apr 15, 2025

CBOM support

enhancementNew feature or requestNew feature or request

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

size/LHigh effortHigh effort

Status: Open.

#6191 In DependencyTrack/dependency-track;

· san-zrl opened on Sep 27, 2024

Investigate switching to Generational ZGC

enhancementNew feature or requestNew feature or request

p3Nice-to-have featuresNice-to-have features

performance

size/MMedium effortMedium effort

Status: Open.

#6192 In DependencyTrack/dependency-track;

· nscuro opened on Jun 6, 2024

Offer a mechanism to bootstrap / provision a new Dependency-Track instance

enhancementNew feature or requestNew feature or request

help wantedExtra attention is neededExtra attention is needed

p2Non-critical bugs, and features that help organizations to identify and reduce riskNon-critical bugs, and features that help organizations to identify and reduce risk

size/LHigh effortHigh effort

Status: Open.

#6193 In DependencyTrack/dependency-track;

· nscuro opened on Apr 12, 2024

Modify frontend to compress BOMs prior to upload, and ensure API server can handle compressed BOMs

enhancementNew feature or requestNew feature or request

p3Nice-to-have featuresNice-to-have features

size/SSmall effortSmall effort

Status: Open.

#6194 In DependencyTrack/dependency-track;

· nscuro opened on Aug 11, 2023

Re-implement fuzzy analysis for internal scanner

enhancementNew feature or requestNew feature or request

help wantedExtra attention is neededExtra attention is needed

p3Nice-to-have featuresNice-to-have features

size/MMedium effortMedium effort

Status: Open.

#6195 In DependencyTrack/dependency-track;

· nscuro opened on Jun 29, 2023