5 Pull requests merged by 3 people

• build(deps): bump com.github.spotbugs:spotbugs-annotations from 4.9.3 to 4.9.4

  #7859 merged Aug 11, 2025

• build(deps): bump golang from 1.24.5-alpine to 1.24.6-alpine

  #7858 merged Aug 8, 2025

• docs: Document poetry-based analysis behaviour in Python analyzer

  #7855 merged Aug 6, 2025

• fix: Return unsorted vulnerabilities in new HashSet, avoiding CoMod

  #7848 merged Aug 6, 2025

• build(deps): bump actions/download-artifact from 4 to 5

  #7856 merged Aug 6, 2025

1 Pull request opened by 1 person

• build(deps): bump actions/checkout from 4 to 5

  #7861 opened Aug 12, 2025

2 Issues closed by 2 people

• Fails with Gradle 9

  #7850 closed Aug 12, 2025

• UpdateException: Error updating the NVD Data for 10.0.4

  #7847 closed Aug 6, 2025

2 Issues opened by 2 people

• [FP]: False positive for CVE-2025-5222 in icu4j-77.1?

  #7860 opened Aug 11, 2025

• [FP]: Jetty false positive findings

  #7857 opened Aug 6, 2025

4 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Do not want to compile on java 11

  #7788 commented on Aug 6, 2025 • 0 new comments

• Support for NIST 2.0 data feeds

  #7514 commented on Aug 10, 2025 • 0 new comments

• [FP]: False positive for apache-el-11.0.0.jar against multiple jetty 11 CVE's

  #7835 commented on Aug 11, 2025 • 0 new comments

• java.lang.NoSuchMethodError: 'java.lang.String org.apache.commons.compress.compressors.gzip.GzipUtils'

  #7843 commented on Aug 12, 2025 • 0 new comments