org.json.json version 20231013.jar is identified as vulnerable by OWASP Dependency checker 8.3.1

[bhaskar-s-019]

org.json.json.20231013.jar is shown as not vulnerable in MVN repo

However OWASP dependency checker points it as vulnerable, any suggestions/help is much appreciated.

CVE-2022-45688 and CVE-2023-5072

[chadlwilson]

In future you are better to report which plugin you are using etc (CLI, gradle plugin, maven plugin etc). Suggest trying to search for other issues before asking a question as well.

This is likely a duplicate of #5545 and/or #5991 - suggest you upgrade to at least the latest 8.x version (8.4.1 may fix one or both of these). If not, close this and subscribe to those existing issues.

[bhaskar-s-019]

Thank you. Yes, I will be more specific in the details.
Using version 8.4.1 it gets resolved