dependency-check / dependency-check/DependencyCheck
Scanning 7z inside jar
Open
enhancement
question
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
Is it possible to scan 7z files inside jar?
I have a problem, that dependency check doesn't find vulnerability when jar file contains 7z compressed vulnerable Chromium. Is this a bug or a (missing) feature?
Example jxbrowser:
https://jxbrowser-support.teamdev.com/release-notes/2023/v7-34.html
-->
jxbrowser-win32-7.34.jar\7.34\chromium-win32.7z\115.0.5790.99.manifest
```
```
Contributor guide
Assessment
This issue has not been assessed yet.