[FP]: pipe2file.exe

[christophweser]

Package URl

Not given in the report

CPE

cpe:2.3:a:file_project:file:2:::::::*

CVE

CVE-2019-18218

ODC Integration

{"label" => "CLI"}

ODC Version

12.0.1

Description

Unsure but I guess this file as part of MaxDB distribution is a false positive.

[github-actions]

Error parsing package url: Not given in the report.

Error: Error: Invalid purl: missing required "pkg" scheme component

Please correct the package URL - consider copying the package url from the HTML report.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/13258256663

[christophweser]

Sorry, there is no pkg in the report for this file:

[aikebah]

See #7398 ...an expected FP due to how DependencyCheck works that you'll have to draft a suppression for by yourself. Not something we can fix in the tool.