[FP]: graylog sink CVE-2021-37759

[colac]

Package URl

pkg:nuget/Serilog.Sinks.Graylog@3.1.1

CPE

cpe:2.3:a:graylog:graylog:*:*:*:*:*:*:*:*

CVE

CVE-2021-37759

ODC Integration

{"label" => "CLI"}

ODC Version

12.0.0

Description

No response

[github-actions]

Nuget Coordinates

dotnet add package Serilog.Sinks.Graylog --version 3.1.1

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #7395
   ]]></notes>
   <packageUrl regex="true">^pkg:nuget/Serilog\.Sinks\.Graylog@.*$</packageUrl>
   <cpe>cpe:/a:graylog:graylog</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/13262509416

[aikebah]

duplicate of #7392 for a different CVE, but same package and same improper CPE