Hi Sathish, On 10.11.2025 12:10, S Sathish S wrote: > Tomcat-el-api.jar > Identifiers > > * cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:* (Confidence:Medium) > suppress > * cpe:2.3:a:apache_tomcat:apache_tomcat:11.0.10:*:*:*:*:*:*:* > (Confidence:Low) suppress
The results you’re seeing are most likely caused by an issue with the hash-based analyzer. This can happen if: - Dependency-Check is running in offline mode, - the `analyzer.central.enabled` property is set to `false`, or - the `el-api.jar` file has been modified, as mentioned in [1]. In any of these cases, neither Dependency-Check nor Tomcat can correct the results. Piotr [1] https://lists.apache.org/thread/0smk8r2czoqprb68yq4hvo0vdhrq52w0 --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
