namandf

Hi, Still seeing similar issues in latest version of trivy https://github.com/aquasecurity/trivy/issues/3807

Thanks @knqyf263 . Would be great if someone can help with https://github.com/aquasecurity/trivy/discussions/3442 as well.

Looking forward to this change. The spdx report currently seems to be invalid according to https://tools.spdx.org/app/validate/

Hi @CallmeMari , The description states that all older unsupported versions could be susceptible. Maven suggests that all versions 2.0.x, 2.1.x,.2.2.x,.2.3.x,2.4.x etc are vulnerable. https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-actuator-autoconfigure Eg. https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-actuator-autoconfigure/2.3.12.RELEASE

Hi @CallmeMari , Hope you are doing great. Intended to check if there's an update.