nats-server: add False Positive data for GHSA-jj54-5q2m-q7pj (#5052)

Signed-off-by: hectorj2f <[email protected]>
wolfi-dev · May 27, 2024 · cc219c6 · cc219c6
1 parent 5cd3d84
commit cc219c6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/nats-server.advisories.yaml b/nats-server.advisories.yaml
@@ -130,6 +130,11 @@ advisories:
             componentType: go-module
             componentLocation: /usr/bin/nats-server
             scanner: grype
+      - timestamp: 2024-05-25T14:09:40Z
+        type: false-positive-determination
+        data:
+          type: vulnerable-code-version-not-used
+          note: This package uses a newer version v2.10.16 when the vulnerable code affects any version older than v2.2.3.
 
   - id: CVE-2023-45283
     aliases: