[FP]: CVE-2022-45688 flagged in jackson-core

[vinay871]

Package URl

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.0; pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2; pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.16.0

CPE

cpe:2.3:a:fasterxml:jackson-modules-java8:2.16.0:::::::, cpe:2.3:a:json-java_project:json-java:2.16.0::::::: cpe:2.3:a:fasterxml:jackson-modules-java8:2.14.2:::::::, cpe:2.3:a:json-java_project:json-java:2.14.2:::::::

CVE

CVE-2022-45688

ODC Integration

{"label" => "Docker"}

ODC Version

7.1.0

Description

CVE-2022-45688 is related to hutool, and unrelated to jackson-core.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/13280369234

[aikebah]

Not reproducible with an up-to-date CLI - update your DependencyCheck CLI version, it's outdated