JwishPark

False positive: CVE-2014-9939 unexpected scan result

2

### Description I scanned my centos-based image with Trivy. And found there is a vulnerability CVE-2014-9939 in binutils. However according to the description, problem has before version 2.26 and installed...

False positive: Unexpected license detected in package(libzstd1)

1

## Checklist - [v] I've read [the documentation regarding wrong detection](https://aquasecurity.github.io/trivy/latest/community/contribute/issue/#wrong-detection). - [v] I've confirmed that a security advisory in data sources was correct. - Run Trivy with `-f json`...