A fix has been implemented and we are monitoring the results.
Posted Jul 29, 2022 - 04:48 UTC
Update
We have removed the false positive CVE data from the Commercial Repository, and we are monitoring to verify that these are flushed from downstream mirrors.
Posted Jul 29, 2022 - 04:47 UTC
Identified
We are currently investigating an issue where false positive CVE data was placed into the collection of CVEs in our Commercial Repository. We’ve isolated the root cause as a bug in our code, fixed it, and are working on removing the false positive CVE data from the Commercial Repository. If you are a Business tier Repository customer, or an Anaconda Server customer (formerly Team Edition), this will impact your copies of the Commercial Repository and CVE data until we revert the false positive CVE data from the Commercial Repository, and your sync runs to flush the false positive CVEs.