Numerous false positives with v6.0.0
Dependency Check v6.0.0 was released today, and initial checks show a lot of false positives, e.g. the pagean
report shows 36 new vulnerabilities vs 0 when run under 5.3.2.
See:
- https://github.com/jeremylong/DependencyCheck/issues/2796
- https://github.com/jeremylong/DependencyCheck/issues/2794
Until this is resolved, pin Dockerfile
at 5.3.2
Edited by Aaron Goldenthal