dep-scan icon indicating copy to clipboard operation
dep-scan copied to clipboard

Published 20 hours ago • verified publisher icon owasp-dep-scan

False-Positive: CVE-2022-24304 rejected by NVD

Open prabhu opened this issue 8 months ago • 0 comments

PURL of wrongly matched component

Rejected by NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-24304

But still reported by GitHub and OSV.

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/08/GHSA-h8hf-x3f4-xwgp/GHSA-h8hf-x3f4-xwgp.json https://osv.dev/vulnerability/GHSA-h8hf-x3f4-xwgp https://osv.dev/vulnerability/GHSA-f825-f98c-gj3g

Depscan findings

I think depscan or vdb6 could have some kind of override data to flag and remove such CVEs

prabhu avatar Jun 21 '24 08:06 prabhu