In our project we provide an old version of the 7z.dll to compress decompress streams. The dll is provided in our applications program directory.
According to https://nvd.nist.gov/vuln/detail/CVE-2024-11477
there is a critical vulnarability but the command line tool gave it a pass.
The command line I used was:
dependency-check.bat --project "Darwin" --scan "C:\Program Files (x86)\Darwin2"
where Darwin2 is our Deskop application....
Is there anything I did wrong or is this test not in the database?
kind regards
In our project we provide an old version of the 7z.dll to compress decompress streams. The dll is provided in our applications program directory.
According to https://nvd.nist.gov/vuln/detail/CVE-2024-11477
there is a critical vulnarability but the command line tool gave it a pass.
The command line I used was:
dependency-check.bat --project "Darwin" --scan "C:\Program Files (x86)\Darwin2"
where Darwin2 is our Deskop application....
Is there anything I did wrong or is this test not in the database?
kind regards