Open Lifter-PL opened 1 year ago
Hello @Lifter-PL
Do you have fuzzy matching enabled, especially for components having purl ?
If yes, you should disable it. That feature is mainly intended for CPE
and to overcome limits of NVD database for certain types of components.
Thank you for information. We will verify if it helps.
Current Behavior
When we build our Angular application and scan it, DT shows false vulnerabilities for router:11.2.14 component that we use. These vulnerabilities are related to HARDWARE ROUTERS. See example in picture below - look at the description.
It is not only case for this library. I.e. also for library called "ip" we have the same problem.
Attachments:
Steps to Reproduce
Expected Behavior
This set of vulnerabilities shouldn't be identified for this component.
Dependency-Track Version
4.7.x
Dependency-Track Distribution
Container Image
Database Server
PostgreSQL
Database Server Version
No response
Browser
Google Chrome
Checklist