dependency-check / dependency-check/DependencyCheck

[FP]: Old Java CVEs reported against recent OpenJFX Swing integration artifact

Open
#8,482 7 comments 0 reactions 1 assignee Claimed by @chadlwilson View on GitHub
enhancement FP Report maven nvd
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

### Package URl

pkg:maven/org.openjfx/javafx-swing@26.0.1

### CPE

`cpe:2.3:a:sun:openjdk:26.0.1:*:*:*:*:*:*:*`

### CVE

CVE-2009-2475

### ODC Integration

{"label" => "Maven Plugin"}

### ODC Version

12.2.2

### Description

all CVEs:

CVE-2009-2475
CVE-2009-2476
CVE-2009-2689
CVE-2009-2690
CVE-2009-3728
CVE-2009-3879
CVE-2009-3880
CVE-2009-3881
CVE-2009-3882
CVE-2009-3883
CVE-2009-3884

all CPEs:

cpe:2.3:a:oracle:javafx:26.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:openjdk:26.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:projects:26.0.1:*:*:*:*:*:*:*
cpe:2.3:a:sun:openjdk:26.0.1:*:*:*:*:*:*:*

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.