[FP]: Spring Security for CVE-2018-1258

[githubuserVenkat]

Package URl

cpe:2.3:a:pivotal_software:spring_security:5.7.6:::::::*

CPE

cpe:2.3:a:pivotal_software:spring_security:5.7.6:::::::*

CVE

CVE-2018-1258

ODC Integration

None

ODC Version

9.0.9

Description

we are using Spring Framework version 5.3.24 combination of Spring Security 5.7.6 which is not vulnerable to this CVE

[github-actions]

Error parsing package url: Not Available.

Error: Error: purl is missing the required "pkg" scheme component.

Please correct the package URL - consider copying the package url from the HTML report.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/7625509000

[github-actions]

Error parsing package url: Not Available.

Error: Error: purl is missing the required "pkg" scheme component.

Please correct the package URL - consider copying the package url from the HTML report.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/7625905100

[github-actions]

Error parsing package url: cpe:2.3:a:pivotal_software:spring_security:5.7.6:::::::*.

Error: Error: purl is missing the required "pkg" scheme component.

Please correct the package URL - consider copying the package url from the HTML report.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/7625915425

[aikebah]

Duplicate of #2952

[github-actions]

Error parsing package url: cpe:2.3:a:pivotal_software:spring_security:5.7.6:::::::*.

Error: Error: purl is missing the required "pkg" scheme component.

Please correct the package URL - consider copying the package url from the HTML report.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/7863122436