[FP]: False Positive for cross-platform-appiancorp-json-parser-java.jar

[vindhyahegde31]

Package URl

pkg:maven/com.appiancorp/appiancorp-json-parser-java@23.1.0.135

CPE

cpe:2.3:a:json_project:json:23.1.0.135:::::::*

CVE

CVE-2020-10675

ODC Integration

{"label"=>"CLI"}

ODC Version

7.0.4

Description

we are using our own custom implementation of JSON parser but tool is giving CVE for this cross-platform-appiancorp-json-parser-java.jar
Here is the reference : buger/jsonparser#188

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/3337291304

[aikebah]

Your lib appears to not be publicly available, so you'll have to mitigate this FP yourself

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/3505302301

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/3505302844