Skip to content

Actions: jeremylong/DependencyCheck

Actions

False Positive Approvals

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
false-positive-approvals.yml
104 workflow runs
104 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[FP]: java cache-api library is marked affected by CVE-2020-36448 for Rust False Positive Approvals #5441: Issue comment #6873 (comment) created by aikebah
August 24, 2024 12:15 20s
August 24, 2024 12:15 20s
[FP]: java spring-boot-starter-cache library is marked affected by CVE-2020-36448 for Rust False Positive Approvals #5439: Issue comment #6874 (comment) created by aikebah
August 24, 2024 12:12 23s
August 24, 2024 12:12 23s
[FP]: sketch for CVE-2021-40531 False Positive Approvals #5434: Issue comment #6901 (comment) created by aikebah
August 24, 2024 11:18 22s
August 24, 2024 11:18 22s
[FP]: autopoi-web-1.4.7 against cpe:2.3:a:web_project:web:1.4.7:*:*:*:*:*:*:* False Positive Approvals #5433: Issue comment #6906 (comment) created by aikebah
August 24, 2024 11:17 17s
August 24, 2024 11:17 17s
[FP]: java-cfenv-boot detected as spring boot False Positive Approvals #5386: Issue comment #6886 (comment) created by aikebah
August 8, 2024 17:45 39s
August 8, 2024 17:45 39s
[FP]: commons-validator mistaken for node validator.js False Positive Approvals #5295: Issue comment #6855 (comment) created by aikebah
July 19, 2024 16:46 19s
July 19, 2024 16:46 19s
[FP]: spring-authorization-server mistaken for node oauth2-server False Positive Approvals #5294: Issue comment #6856 (comment) created by aikebah
July 19, 2024 16:44 19s
July 19, 2024 16:44 19s
[FP]: Spring OAuth2 Resource Server mistaken for VMWare Workspace False Positive Approvals #5293: Issue comment #6858 (comment) created by aikebah
July 19, 2024 16:43 21s
July 19, 2024 16:43 21s
[FP]: Wrongly reporting vulnerability CVE-2007-1652 on org/eclipse/jetty/jetty-openid False Positive Approvals #5202: Issue comment #6829 (comment) created by aikebah
July 10, 2024 15:27 25s
July 10, 2024 15:27 25s
Report for CVE-2012-5785 in Axis2 Version 1.8.2 False Positive Approvals #5008: Issue comment #6757 (comment) created by aikebah
July 2, 2024 22:58 22s
July 2, 2024 22:58 22s
[FP]: spring-boot-jarmode-tools incorrectly identified as vmware:tools False Positive Approvals #4873: Issue comment #6725 (comment) created by aikebah
June 29, 2024 10:07 18s
June 29, 2024 10:07 18s
[FP]: io.micrometer:micrometer-tracing-bridge-brave 1.3.0 (and other): CVE-2023-28360 (and other) False Positive Approvals #4826: Issue comment #6700 (comment) created by aikebah
June 7, 2024 19:31 19s
June 7, 2024 19:31 19s
[FP]: brave-propagation-tracecontext 0.2.0 (and other): CVE-2023-28360 (and other) False Positive Approvals #4825: Issue comment #6701 (comment) created by aikebah
June 7, 2024 19:30 24s
June 7, 2024 19:30 24s
[FP]: prometheus-metrics-model considered for CVE-2020-36460 False Positive Approvals #4824: Issue comment #6707 (comment) created by aikebah
June 7, 2024 19:28 19s
June 7, 2024 19:28 19s
[FP]: CVE-2022-3171 on protobuf-java 3.25.3 False Positive Approvals #4822: Issue comment #6711 (comment) created by aikebah
June 7, 2024 19:04 20s
June 7, 2024 19:04 20s
[FP]: CVE-2021-3765, validator.js dependency gets flagged on hibernate-validator dependencies False Positive Approvals #4767: Issue comment #6692 (comment) created by jeremylong
May 28, 2024 12:11 54s
May 28, 2024 12:11 54s
[FP]: CVE-2017-16111, which applies to the content module of the hapijs/hapi.js framework, gets falgged on ktor dependencies with content in the name False Positive Approvals #4766: Issue comment #6693 (comment) created by jeremylong
May 28, 2024 12:11 27s
May 28, 2024 12:11 27s
[FP]: CVE-2016-10543, which applies to the call module of the hapijs/hapi.js framework, gets falgged on ktor dependencies with call in the name False Positive Approvals #4765: Issue comment #6694 (comment) created by jeremylong
May 28, 2024 12:11 24s
May 28, 2024 12:11 24s
[FP]: CVE-2022-21704, a log4js (node.js) dependency, gets flagged in a log4j (Java) dependency False Positive Approvals #4764: Issue comment #6695 (comment) created by jeremylong
May 28, 2024 12:10 25s
May 28, 2024 12:10 25s
[FP]: CVE-2019-17543, which applies to the lz4 (native C) library, gets applied to lz4-java, which is a Java wrapper for it, but with its own versioning False Positive Approvals #4763: Issue comment #6696 (comment) created by jeremylong
May 28, 2024 12:10 55s
May 28, 2024 12:10 55s
[FP]: org.eclipse.jetty.toolchain/[email protected] is misidentified as jetty 4.0.6 component (but is not) (wrong CPE) False Positive Approvals #4725: Issue comment #6666 (comment) created by aikebah
May 15, 2024 05:52 24s
May 15, 2024 05:52 24s
[FP]: pkg:nuget/[email protected] False Positive Approvals #4711: Issue comment #6662 (comment) created by aikebah
May 14, 2024 05:11 26s
May 14, 2024 05:11 26s
[FP]: togglz-mongodb-4.4.0.jar is mixed up with mongodb-4.4.0.jar False Positive Approvals #4685: Issue comment #6640 (comment) created by aikebah
May 8, 2024 12:38 19s
May 8, 2024 12:38 19s
[FP]: java-cfenv-boot detected as Spring Framework False Positive Approvals #4652: Issue comment #6632 (comment) created by aikebah
April 28, 2024 20:53 20s
April 28, 2024 20:53 20s
[FP]: java-cfenv-jdbc detected as Spring Framework False Positive Approvals #4649: Issue comment #6631 (comment) created by aikebah
April 28, 2024 20:45 23s
April 28, 2024 20:45 23s