Package URl pkg:nuget/[email protected] CPE cpe:2.3🅰️asp-project:asp-project:1.0:::::::* CVE CVE-2009-0280 ODC Integration {"label"=>"CLI"} ODC Version 8.2.1 Description Using Azure DevOps pipelines with https://marketplace.visualstudio.com/items?itemName=dependency-check.dependency...

Is your feature request related to a problem? Please describe. We have hundreds of different pipelines where we use DependencyCheck. When we want to disable a feature centrally, for example the Sonartype OSS Index, we need to change it in every single pipeline. It would be great if it was possible t...

Package URl pkg:maven/org.springframework.security/[email protected] CPE cpe:2.3:a:pivotal_software:spring_security:5.7.8:*:*:*:*:*:*:* CVE CVE-2020-5408 ODC Integration {"label"=>"Maven Plugin"} ODC Version 8.2.1 Description I noted few False Positives, but it still get reported on ma...

Describe the bug I use Gitlab CI to trigger the Dependency Check task, refer to the .gitlab-ci.yml file snippet below: default: image: gradle:alpine dependency-check: script: gradle dependencyCheckAnalyze allow_failure: true build.gradle: plugins { ... id 'org.owasp.dependencycheck'...

Package URl pkg:maven/com.fasterxml.jackson.core/jackson-core@.*$ CPE cpe:2.3:a:json-java_project:json-java:*:*:*:*:*:*:*:* versions up to (excluding) 20230227 CVE CVE-2022-45688 ODC Integration None ODC Version 7.4.4 Description CVE-2022-45688 is related to hutool, and unrelated to jackson-core.

Package URl pkg:maven/org.yaml/snakeyaml@.*$ CPE cpe:2.3:a:yaml_project:yaml:*:*:*:*:*:go:*:* versions up to (excluding) 2.0.0-4 CVE CVE-2023-2251 ODC Integration None ODC Version 7.4.4 Description CVE-2023-2251 has to do with eemeli/yaml and is getting flagged for snakeyaml version 1.33. There does...

Package URl pkg:maven/org.apache.sling/[email protected] CPE cpe:2.3:a:apache:sling_commons_json:1.2.14:*:*:*:*:*:*:* CVE CVE-2022-47937 ODC Integration {"label"=>"Maven Plugin"} ODC Version 8.1.2 Description The CVE clearly states "The org.apache.sling.commons.json bundle h...

Package URl pkg:nuget/[email protected] CPE cpe:2.3:a:file_project:file:2.0.0:*:*:*:*:*:*:* CVE VE-2019-18218(7.8), CVE-2014-3479(4.3), CVE-2014-3487(4.3), CVE-2014-8117(5.0), CVE-2014-9653(7.5), CVE-2014-9652(5.0), CVE-2014-2270(4.3), CVE-2014-3480(4.3) ODC Integration None ODC Version 8.2.1...

Package URl pkg:nuget/[email protected] CPE cpe:2.3🅰️ftp:ftp:46.0.2:::::::* (Confidence:Low) suppress cpe:2.3🅰️ftp_project:ftp:46.0.2:::::::* (Confidence:Low) suppress CVE https://nvd.nist.gov/vuln/detail/CVE-2023-22551, https://nvd.nist.gov/vuln/detail/CVE-1999-0201 ODC Integration {"label"=>...

Package URl pkg:nuget/[email protected] CPE cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:* CVE CVE-2020-8554 ODC Integration {"label"=>"CLI"} ODC Version 8.2.1 Description Using Azure DevOps pipelines with https://marketplace.visualstudio.com/items?itemName=dependency-check.dependencycheck