[FP]: pkg:npm/mongodb@5.9.2

### Package URl

pkg:npm/mongodb@5.9.2

### CPE

`cpe:2.3:a:mongodb:mongodb:5.9.2:*:*:*:*:*:*:*`

### CVE

CVE-2014-8180

### ODC Integration

{"label"=>"Gradle Plugin"}

### ODC Version

9.0.5

### Description

Dependency Check pulls out the extremely old CVE-2014-8180 (which seems to be applicable to running mongod on some RedHat) and matches it to the mongodb driver for Node.js. Not sure, what exactly has changed, but the NVD website doesn't report any recent change on the entry (last change in 2017). The CVE has not been reported before, i.e., in particular with NVD data feed. Also, it's not always being reported but only occasionally, so behavior seems somewhat non-deterministic.

Is it something which can be suppressed globally or do we have to do it locally?