4 Pull requests merged by 2 people

• fix: Make the HTTP-Client use pre-emptive authentication

  #7255 merged Dec 31, 2024

• build(deps): bump org.sonatype.plugins:nexus-staging-maven-plugin from 1.6.13 to 1.7.0

  #6887 merged Dec 31, 2024

• build(deps): bump org.semver4j:semver4j from 5.4.1 to 5.5.0

  #7278 merged Dec 31, 2024

• build(deps): bump actions/setup-dotnet from 4.1.0 to 4.2.0

  #7275 merged Dec 28, 2024

1 Pull request opened by 1 person

• feat: Extend authentication to support Bearer token for many resources

  #7277 opened Dec 31, 2024

13 Issues closed by 5 people

• Extend HTTPClient usage for downloads to NexusSearch

  #7253 closed Dec 31, 2024

• Authentication failure after upgrade to 11.0.0 with Maven

  #7108 closed Dec 31, 2024

• Suppression not taken into account

  #5516 closed Dec 30, 2024

• Regarding the tool tagging the spring-core library version as vulnerable even if it's higher than 5.3.16

  #6525 closed Dec 30, 2024

• [FP]: org.eclipse.microprofile.config.microprofile-config-api for CVE-2022-45129

  #6885 closed Dec 30, 2024

• [FP]: CVE-2019-25087, which applies to a C++ project, is being flagged on any dependency with substrings `httpserver`, `http-server` or `http_server` in the name

  #6870 closed Dec 30, 2024

• [FP]: vulnerability in `date-and-time` (NPM) dependencies being flagged in `kotlinx-datetime` dependencies

  #6864 closed Dec 30, 2024

• [FP]: Node.js bignum library vulnerability being flagged in Kotlin bignum library

  #6863 closed Dec 30, 2024

• Dependency Check Not Running for Past Two days.

  #7076 closed Dec 30, 2024

• [FP]: CVE-2019-12401 org.codehaus.woodstox:wstx-asl:3.2.6 identified as vulnerable for Apache Solr

  #7212 closed Dec 30, 2024

• download nvd data only with squid proxy

  #7270 closed Dec 27, 2024

• Dependency Check Report - Pandas 1.5.3

  #7230 closed Dec 26, 2024

• No documents exist

  #7273 closed Dec 25, 2024

2 Issues opened by 2 people

• can not open additional connections

  #7276 opened Dec 28, 2024

• Scanner not picking the build.gradle file but scans the other jar files available in the repo

  #7274 opened Dec 26, 2024

6 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• The tool gave 7z.dll a clean go

  #7269 commented on Dec 26, 2024 • 0 new comments

• Download of suppression files with authorization header

  #5783 commented on Dec 30, 2024 • 0 new comments

• Authenticate with Google cloud storage bucket

  #6826 commented on Dec 31, 2024 • 0 new comments

• DependencyCheck 11 Gradle plugin cannot download non-NVD data from mirrors that require authentication

  #7131 commented on Dec 31, 2024 • 0 new comments

• Not being able to authenticate for central.content.url and analyzer.central.url

  #7093 commented on Dec 31, 2024 • 0 new comments

• feat: Support report prefix filename (#2634)

  #7262 commented on Dec 30, 2024 • 0 new comments