Francois Marot

Hello, a few more false positive regarding CVE-2022-31569: * vecmath-1.5.2.jar (pkg:maven/javax.vecmath/[email protected], cpe:2.3:a:projects_project:projects:1.5.2:*:*:*:*:*:*:*) : CVE-2022-31569 * annotations-4.1.1.4.jar (pkg:maven/com.google.android/[email protected], cpe:2.3:a:projects_project:projects:4.1.1.4:*:*:*:*:*:*:*) : CVE-2022-31569 * timingframework-core-7.3.1.jar (pkg:maven/net.java.timingframework/[email protected], cpe:2.3:a:projects_project:projects:7.3.1:*:*:*:*:*:*:*) : CVE-2022-31569

Hello, I faced this issue today. It would be ideal if the change of DB Schema would be mentioned in the release notes. In 7.1.1 release, nothing shows we have...

just a remark: it's not as simple as what I indicated in my original message because the types returned by .getDependencies() and .getArtifacts() differ. I'll try to have the code...

This issue seems similar to https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/166

Hello, I tried 2 hours at work and it was working strangely as stated. I tried 5 minutes at home with a hand-made pom and everything was OK ! I'll...

Hi ! No I have no solutions developed, but I _may_ be interested in implementing them if you are interested. If you are not, I may dev another in-house solution....

For the record, I think @glatuske found a way to do exactly what is required in a simple way. A dirty hackish way but a simple and durable way: https://github.com/jacoco/jacoco/pull/1251#issuecomment-1061585625