{"action":"created","issue":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/434","repository_url":"https://api.github.com/repos/jeremylong/DependencyCheck","labels_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/434/labels{/name}","comments_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/434/comments","events_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/434/events","html_url":"https://github.com/jeremylong/DependencyCheck/issues/434","id":124893451,"number":434,"title":"MySQL Connector/J Misidentified as MySQL Server","user":{"login":"InfoSec812","id":99691,"avatar_url":"https://avatars3.githubusercontent.com/u/99691?v=3","gravatar_id":"","url":"https://api.github.com/users/InfoSec812","html_url":"https://github.com/InfoSec812","followers_url":"https://api.github.com/users/InfoSec812/followers","following_url":"https://api.github.com/users/InfoSec812/following{/other_user}","gists_url":"https://api.github.com/users/InfoSec812/gists{/gist_id}","starred_url":"https://api.github.com/users/InfoSec812/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/InfoSec812/subscriptions","organizations_url":"https://api.github.com/users/InfoSec812/orgs","repos_url":"https://api.github.com/users/InfoSec812/repos","events_url":"https://api.github.com/users/InfoSec812/events{/privacy}","received_events_url":"https://api.github.com/users/InfoSec812/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-01-05T04:28:13Z","updated_at":"2017-07-10T13:31:32Z","closed_at":"2016-02-21T13:44:29Z","body":"A project I have uses MySQL's Connector/J for JDBC and is included via Maven. When I use the DependencyCheck maven plugin, it identifies the MySQL JDBC driver artifact as being vulnerable, but all of the referenced vulnerabilities are for the MySQL server application and not in any way related to the JDBC driver. \n\n[Dependency-Check Report.pdf](https://github.com/jeremylong/DependencyCheck/files/78002/Dependency-Check.Report.pdf)\n"},"comment":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/comments/314106048","html_url":"https://github.com/jeremylong/DependencyCheck/issues/434#issuecomment-314106048","issue_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/434","id":314106048,"user":{"login":"asbachb","id":1482768,"avatar_url":"https://avatars1.githubusercontent.com/u/1482768?v=3","gravatar_id":"","url":"https://api.github.com/users/asbachb","html_url":"https://github.com/asbachb","followers_url":"https://api.github.com/users/asbachb/followers","following_url":"https://api.github.com/users/asbachb/following{/other_user}","gists_url":"https://api.github.com/users/asbachb/gists{/gist_id}","starred_url":"https://api.github.com/users/asbachb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asbachb/subscriptions","organizations_url":"https://api.github.com/users/asbachb/orgs","repos_url":"https://api.github.com/users/asbachb/repos","events_url":"https://api.github.com/users/asbachb/events{/privacy}","received_events_url":"https://api.github.com/users/asbachb/received_events","type":"User","site_admin":false},"created_at":"2017-07-10T13:31:32Z","updated_at":"2017-07-10T13:31:32Z","body":"Anyone tried to get in contact with NVD in order to ask them to create an own cpe for the connectors? For **mariadb-java-client** it's the same problem."}}
{"actor":{"display_login":"asbachb"}}