Closed krah034 closed 2 years ago
Reading the references listed by OSSI itself for this vuln, it can be confirmed that what is said above is correct... that this is an OSSI data defect.
Sorry for the delay. We have been working on getting appropriate internal processes defined for dealing with data issues in the new data set. We are now working on catching up on the backlog.
In this case, the issues has already been resolved. The supplied links indicate that the vulnerability data has been corrected.
Thanks for your help!
I'm wondering why this was reported in the Apache tika build for the very first time yesterday, despite that we have builds several times a week. And now I learned that this was fixed in July. Is there some sort of delay for people using ossindex-maven-plugin?
Vulnerability URL
Component URL
Description Today the BanVulnerableDependencies from ossindex-maven enforcer-rules started reporting the following vulnerability:
Only h2database:h2:1.4.197 should be affected by this CVE.