[FP]: CommandLineParser

[echalone]

Package URl

pkg:nuget/CommandLineParser@2.9.1

CPE

cpe:2.3:a:line:line:2.9.1:::::::*

CVE

CVE-2015-0897

ODC Integration

None

ODC Version

8.4.2

Description

A false positive for the LINE library is reported, when in reality it is the CommandLineParser NuGet package ( https://www.nuget.org/packages/CommandLineParser ).
Also happens for other versions of CommandLineParser.

[github-actions]

Nuget Coordinates

dotnet add package CommandLineParser --version 2.9.1

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #6048
   ]]></notes>
   <packageUrl regex="true">^pkg:nuget/CommandLineParser@.*$</packageUrl>
   <cpe>cpe:/a:line:line</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/6823777831

[aikebah]

Resolved via duplicate issue #6088