[FP]: CVE-2023-45142 detector-resources-support-0.32.0

[rochish-suresh]

Package URl

pkg:maven/com.google.cloud.opentelemetry/detector-resources-support@0.32.0

CPE

cpe:2.3:a:opentelemetry:opentelemetry:0.32.0:::::::*

CVE

CVE-2023-45142

ODC Integration

{"label"=>"Gradle Plugin"}

ODC Version

11.1.1

Description

No response

[github-actions]

Maven Coordinates

<dependency>
   <groupId>com.google.cloud.opentelemetry</groupId>
   <artifactId>detector-resources-support</artifactId>
   <version>0.32.0</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #7248
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/com\.google\.cloud\.opentelemetry/detector-resources-support@.*$</packageUrl>
   <cpe>cpe:/a:opentelemetry:opentelemetry</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/12311985342

[chadlwilson]

You don't need to create an item for every single CVE if the library and CPE are the same.

Please also include a description so people know why you think it is a false positive.

[aikebah]

Duplicate of #7247