fix: Fixup improper packageURL, should end in @ before version, not /

jeremylong · Feb 25, 2023 · 7d881ee · 7d881ee
1 parent 8a8e5d2
commit 7d881ee
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/src/main/resources/dependencycheck-base-suppression.xml b/core/src/main/resources/dependencycheck-base-suppression.xml
@@ -6185,7 +6185,7 @@
         suppress various improper matches to the CPE that belongs only to pkg:maven/org.json/json
         FP per #5502
         ]]></notes>
-        <packageUrl regex="true">^(?!pkg:maven/org\.json/json/).+$</packageUrl>
+        <packageUrl regex="true">^(?!pkg:maven/org\.json/json@).+$</packageUrl>
         <cpe>cpe:/a:json-java_project:json-java</cpe>
     </suppress>
 </suppressions>