Nikolaj Aggeboe

[FP]: prometheus-metrics-* packages are identified as prometheus server (CVE-2019-3826)

9

### Package URl pkg:maven/io.prometheus/[email protected] ### CPE cpe:2.3:a:prometheus:prometheus:1.2.1:*:*:*:*:*:*:* ### CVE CVE-2019-3826 ### ODC Integration {"label"=>"Gradle Plugin"} ### ODC Version 8.4.3 ### Description prometheus-metrics-config-1.2.1.jar (pkg:maven/io.prometheus/[email protected], cpe:2.3:a:prometheus:prometheus:1.2.1:*:*:*:*:*:*:*) : CVE-2019-3826 prometheus-metrics-core-1.2.1.jar (pkg:maven/io.prometheus/[email protected], cpe:2.3:a:prometheus:prometheus:1.2.1:*:*:*:*:*:*:*) :...

generateGitProperties fails on property 'projectVersion' with release 2.5.0

6

The `generateGitProperties` task fails with ``` Execution failed for task ':generateGitProperties'. > Cannot fingerprint input property 'projectVersion': value '3.20.0-SNAPSHOT' cannot be serialized. ``` and ``` plugins { id 'com.gorylenko.gradle-git-properties' version...