Workflow failed: OWASP dependency check (daily) (#1328)

[github-actions]

See OWASP dependency check (daily) #1328.

[github-actions]

See OWASP dependency check (daily) #1329.

[github-actions]

See OWASP dependency check (daily) #1330.

[github-actions]

See OWASP dependency check (daily) #1331.

[github-actions]

See OWASP dependency check (daily) #1332.

[github-actions]

See OWASP dependency check (daily) #1333.

[github-actions]

See OWASP dependency check (daily) #1334.

[github-actions]

See OWASP dependency check (daily) #1335.

[github-actions]

See OWASP dependency check (daily) #1336.

[github-actions]

See OWASP dependency check (daily) #1337.

[github-actions]

See OWASP dependency check (daily) #1338.

[xiang17]

This is a false alarm. The error message is on claims it's on azure-monitor-opentelemetry-autoconfigure-1.4.0.jar but the CVE is about OpenTelemetry-Go.

One or more dependencies were identified with known vulnerabilities in agent:

azure-monitor-opentelemetry-autoconfigure-1.4.0.jar (pkg:maven/com.azure/azure-monitor-opentelemetry-autoconfigure@1.4.0, cpe:2.3:a:opentelemetry:opentelemetry:1.4.0:::::::*) : CVE-2026-39882

https://nvd.nist.gov/vuln/detail/CVE-2026-39882
https://www.cve.org/CVERecord?id=CVE-2026-39882

[github-actions]

See OWASP dependency check (daily) #1339.

[github-actions]

See OWASP dependency check (daily) #1340.

[github-actions]

See OWASP dependency check (daily) #1341.

[github-actions]

See OWASP dependency check (daily) #1342.