[FP]: apollo-gradle-plugin-tasks mistaken as tasks.org android app

[xcq1]

Package URl

pkg:maven/com.apollographql.apollo/apollo-gradle-plugin-tasks@5.0.1

CPE

cpe:/a:tasks:tasks

CVE

No response

ODC Integration

{"label" => "Gradle Plugin"}

ODC Version

12.2.2

Description

This reports CVE-2020-22475 about the "Tasks" application. The package belongs to Apollo GraphQL Gradle tooling.

[github-actions]

Maven Coordinates

<dependency>
  <groupId>com.apollographql.apollo</groupId>
  <artifactId>apollo-gradle-plugin-tasks</artifactId>
  <version>5.0.1</version>
</dependency>

Suppression rule:

<suppress base="true">
    <notes><![CDATA[
    FP per issue #8664
    ]]></notes>
    <packageUrl regex="true">^pkg:maven/com\.apollographql\.apollo/apollo-gradle-plugin-tasks@.*$</packageUrl>
    <cpe regex="true">cpe:/a:tasks:tasks(:.*)?$</cpe>
</suppress>

Link to test results: https://github.com/dependency-check/DependencyCheck/actions/runs/29316041020

[chadlwilson]

approved

[github-actions]

Suppress rule has been added to the generatedSuppressions branch.