Version 2.9.1 is reported as vulnerable

[NinjaCross]

Describe the bug JetBrains Rider signal the 2.9.1 version as vulnerable. It doesn't provide details on the motivation. This is also mentioned here: https://github.com/jeremylong/DependencyCheck/issues/6048 https://github.com/jeremylong/DependencyCheck/issues/6088

Unfortunately some of the projects/customers I'm working on/with refuse to use libraries with known vulnerabilities. Is there a mitigation ?

Many thanks in advance for any suggestion.

To Reproduce Just add the NuGet package to any project in Rider, and the warning will appear

Expected behavior No vulnerabilities signaled

Screenshots

[schittli]

With the Version 2.9.2-ci-210:

JetBrains Rider does not report any vulnerability 😃

[NinjaCross]

Thankyou @schittli :) When will this version be available on NuGet? I don't see it listed on NuGet.org yet.

[DrusTheAxe]

Thankyou @schittli :) When will this version be available on NuGet? I don't see it listed on NuGet.org yet.

Any update here? Nuget.org still has 2.9.1

[NinjaCross]

@schittli any progress on this ? Nuget.org still has 2.9.1

[ericnewton76]

I will look into this over the weekend

[DrusTheAxe]

Any news?

[ES0T]

is this going to be pushed to nuget?

[HaGGi13]

This was remarked as false positive, so rather no issue, right?

https://github.com/dependency-check/DependencyCheck/issues/6088