Dustin Kut

[FP]: CVE-2022-37422 incorrectly detected on pkg:maven/org.eclipse.microprofile.config/[email protected]

2

### Package URl `pkg:maven/org.eclipse.microprofile.config/[email protected] ` ### CPE `cpe:2.3:a:payara:payara:2.0.1:*:*:*:*:*:*:*` ### CVE CVE-2022-37422 ### ODC Integration {"label"=>"Maven Plugin"} ### ODC Version 7.1.2 ### Description I have [Java project](https://github.com/project-ncl/kafka-store) using microprofile-config-api, which is...

Since apparently to get a PR accepted to slick, I need to sign a CLA, I'll create an issue instead. The `build.sbt` file has version `2.0.0-RC1` in the library dependencies....

sbt >= 1.9.4 doesn't handle packaging type ejb properly

2

## steps The reproducer can be found here: https://github.com/thescouser89/ejb-sbt-issue Just run: ``` sbt run ``` in each sub-folder inside. ## problem sbt >= 1.9.4 gets confused by the packaging type...