Hit in the OSSINDEX

[RickC37]

In our vulnerability check we get a hit in OSSINDEX database..

https://ossindex.sonatype.org/vuln/53d58c08-d32b-4d21-92f4-d0930e6b3210?component-type=maven&component-name=org.codehaus.plexus.plexus-utils&utm_source=dependency-check&utm_medium=integration&utm_content=6.0.3

It reference an old issue from 2015
#3

And it seems to be solved 2016
f933e5e

I think some of the maintainer should therefore simply delete the OSSINDEX entry

[RickC37]

updating myself... I think the issue is not the hit in the DB itself, it is that there is no affected version mentioned and therefore it still is a positive hit for newer version...