Overview

7 Pull requests merged by3 people

• feat: Migration to Alpine 3.22

  #7822 mergedJul 18, 2025

• docs: request FP reporters use the latest version of ODC.

  #7820 mergedJul 17, 2025

• build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1

  #7817 mergedJul 16, 2025

• build(deps-dev): bump io.netty:netty-codec-http from 4.2.2.Final to 4.2.3.Final

  #7815 mergedJul 15, 2025

• build: remove unused code coverage

  #7813 mergedJul 13, 2025

• build: use correct environment variables for publishing

  #7812 mergedJul 13, 2025

• build: utilize central publishing

  #7810 mergedJul 13, 2025

1 Pull request opened by1 person

• build(deps): bump maven.api.version from 3.6.3 to 3.9.11

  #7816 openedJul 16, 2025

12 Issues closed by4 people

• [FP]: CVE-2019-14822 is flagged falsely in JARs due to a naming conflict with Linux "ibus" framework

  #7823 closedJul 18, 2025

• NVD Update Failed: attempted to retrieve data from the NVD unsuccessfully five times

  #7768 closedJul 18, 2025

• CVE-2019-14822 is flagged falsely in JARs due to a naming conflict with Linux "ibus" framework

  #7821 closedJul 17, 2025

• [FP]: Jetty webserver false positive findings

  #7819 closedJul 16, 2025

• [FP]: org.apache.commons:commons-file-upload2-core:2.0.0-M4

  #7800 closedJul 16, 2025

• Support `update` attribute of CPE for matching

  #7809 closedJul 16, 2025

• Suppression Rule had zero matches - just after adding it

  #7795 closedJul 14, 2025

• Failed to process CVE-2025-48466

  #7801 closedJul 13, 2025

• [FP]: CVE-2023-1932 for Quarkus Hibernate Validator

  #7798 closedJul 12, 2025

• [FP]: False positive for commons-jxpath/commons-jxpath@1.4.0

  #7805 closedJul 12, 2025

• [FP]: False positivie for javax.resource/connector-api@1.5

  #7806 closedJul 12, 2025

• [FP]: False positive for commons-configuration/commons-configuration@1.10

  #7807 closedJul 12, 2025

4 Issues opened by4 people

• Scanning GO projects running ODC in a docker container in a Jenkins job

  #7824 openedJul 18, 2025

• [FP]: False positive findings in Dependency Checker for Oracle Java 8

  #7818 openedJul 16, 2025

• reactor-netty matches netty

  #7814 openedJul 14, 2025

• Make Changelog references clickable

  #7808 openedJul 12, 2025

5 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Owasp scan for CVE-2024-38820

  #7791 commented onJul 14, 2025 • 0 new comments

• Do not want to compile on java 11

  #7788 commented onJul 17, 2025 • 0 new comments

• [RFE]: Possibility to configure URL to "Maven central"

  #7686 commented onJul 18, 2025 • 0 new comments

• build(deps)!: bump io.github.jeremylong:open-vulnerability-clients from 7.3.2 to 8.0.0

  #7630 commented onJul 16, 2025 • 0 new comments

• fix: class loading problem with fat jars (#7786)

  #7787 commented onJul 12, 2025 • 0 new comments