[FP]: brave-propagation-tracecontext 0.2.0 (and other): CVE-2023-28360 (and other)

[AndreyMZ]

Package URl

pkg:maven/io.zipkin.contrib.brave-propagation-w3c/brave-propagation-tracecontext@0.2.0

CPE

cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*

CVE

CVE-2023-28360

ODC Integration

{"label"=>"Gradle Plugin"}

ODC Version

9.2.0

Description

No response

[github-actions]

Maven Coordinates

<dependency>
   <groupId>io.zipkin.contrib.brave-propagation-w3c</groupId>
   <artifactId>brave-propagation-tracecontext</artifactId>
   <version>0.2.0</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #6701
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/io\.zipkin\.contrib\.brave-propagation-w3c/brave-propagation-tracecontext@.*$</packageUrl>
   <cpe>cpe:/a:brave:brave</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/9286855627

[aikebah]

approved

[github-actions]

Suppress rule has been added to the generatedSuppressions branch.