Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FP]: False positive with jmdns for CVE-2024-42469 #6966

Closed
jnuttall-hpt opened this issue Sep 16, 2024 · 2 comments
Closed

[FP]: False positive with jmdns for CVE-2024-42469 #6966

jnuttall-hpt opened this issue Sep 16, 2024 · 2 comments
Labels
FP Report maven changes to the maven plugin

Comments

@jnuttall-hpt
Copy link

Package URl

pkg:maven/org.jmdns/[email protected]

CPE

cpe:2.3:a:openhab:openhab:3.5.9:::::::*

CVE

CVE-2024-42469

ODC Integration

None

ODC Version

7.4.4

Description

Started giving false positives Friday 13th for this library on this and also CVE-2024-42470

Copy link
Contributor

Maven Coordinates

<dependency>
   <groupId>org.jmdns</groupId>
   <artifactId>jmdns</artifactId>
   <version>3.5.9</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #6966
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/org\.jmdns/jmdns@.*$</packageUrl>
   <cpe>cpe:/a:openhab:openhab</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/10878957583

@github-actions github-actions bot added the maven changes to the maven plugin label Sep 16, 2024
@aikebah
Copy link
Collaborator

aikebah commented Sep 18, 2024

Resolved via #6967

@aikebah aikebah closed this as completed Sep 18, 2024
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Dec 6, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
FP Report maven changes to the maven plugin
Projects
None yet
Development

No branches or pull requests

2 participants