Is your feature request related to a problem? Please describe. Using yarn berry with workspaces doesn't work right now. Would be great to also support this updated version of yarn. Tried with the latest CLI version: ./dependency-check.sh --out . --scan ... Repository to reproduce: https://github.com...

Hi all, Why, when we add new entries in the suppression file, the report shows new vulnerabilities? For example, in the report I had the following entries: batik-css-1.7.jar - CVE-2015-0250, CVE-2017-5662, CVE-2018-8013, CVE-2019-17566, CVE-2020-11987 Then I suppressed the above entries and now, the...

We have setup a MSSQL database and connection to this database is working fine. The database is updated as expected though we are seeing the following error later on in the process when trying to check vulnerabilities found against entries found in the DB Have you see this before? there are no refer...

I'm scanning Python requirements.txt; and I have version 3.2.1. On the security report it mentions version 3.2.1 is patched. https://nvd.nist.gov/vuln/detail/CVE-2022-36087 However, in my dependency-check report, it reports that this version is still vulnerable. pkg:pypi/[email protected] (Confidence:...

Package URl pkg:maven/org.apache.camel/[email protected] CPE cpe:2.3:a:apache:camel:2.25.1:*:*:*:*:*:*:* cpe:2.3:a:restlet:restlet:2.25.1:*:*:*:*:*:*:* cpe:2.3:a:restlet:restlet_framework:2.25.1:*:*:*:*:*:*:* CVE CVE-2020-11971 ODC Integration {"label"=>"Maven Plugin"} ODC Version 7.2.1 Descri...

Hi, I have installed dependency-check to a linux RedHat system which is unable to connect to the internet. I have mapped a windows drive containing all the nvdcve files to the linux server on mount point /mnt/owasp. So the files I am referring to are nvdcve-1.1-%d.json.gz where %d is 2002 to 2022. I...

Include information in the reports regarding the known exploited CVEs: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Using maven I used to have a working config using ${project.basedir}/owasp-suppressions.xml in the path to suppressionFile: <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> <version>7.1.2</version...

Hi, we implemented python scanner por our Python projects, and when we run sonar-scanner the problem we're having is that sonar looks into these reports and shows lots of bugs and so on. Is there any way to stop this (And not only excluding this directory from sonar) Does this issue has to do with w...

Package URl pkg:n### Package URl CPE cpe:2.3🅰️parse-url_project:parse-url:1.3.3:::::::* CVE CVE-2022-2900, CVE-2022-3224 ODC Integration {"label"=>"CLI"} ODC Version 7.2.0 Description Almost identical to: #4661 https://www.npmjs.com/package/parseurl (pkg:npm/[email protected]) Incorrectly associated...