False positive on Quartz 2.3.0

[bopinto]

I believe the plugin is reporting a false positive on the quartz library, version 2.3.0 - reported as cpe:/a:jenkins:jenkins:2.3

<dependency>
    <groupId>org.quartz-scheduler</groupId>
    <artifactId>quartz</artifactId>
    <version>2.3.0</version>
</dependency>

[sellersj]

Work around suppression.

<suppress>
  <gav regex="true">^org\.quartz-scheduler:quartz:.*$</gav>
  <cpe>cpe:/a:jenkins:jenkins</cpe>
</suppress>

[TobiX]

This is a fallout of the lucene update discussed in #1580

[jeremylong]

This issue was resolved with 4.0.1.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.