[FP]: form-filler-addon has been reported wrongly

[ZheSun88]

Package URl

pkg:maven/com.vaadin.flow.ai/form-filler-addon@1.0.0

CPE

cpe:2.3:a:vaadin:flow:1.0.0::::::

CVE

CVE-2019-25027, CVE-2021-31412, CVE-2018-25007, CVE-2021-31404

ODC Integration

{"label"=>"Maven Plugin"}

ODC Version

8.4.0

Description

This version of form-filler-addon is the new product by Vaadin, it should not be included in the reported CVE. as it is a prerelease version, the artifact is in our prerelease nexus instead of maven central.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/6096354766

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/6096401641

[ZheSun88]

I made a PR that combine this fix with previous ones.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/6587412192