artifact version works only on lowerThan ('<=') , but match fails on '=='

[kamal079]

The plugin works great which builds the dependency graph and reports all CVEs on a given project. However, there is an issue with public static boolean isAffected(String fullArtifactId, String version, CveVulnerability cve) { method in VersionUtil.java , where the exact version match fails.

The issue can be reproduced by adding an artifact whose GAV matches a CVE entry in CVE-DB. For example, the GAV commons-httpclient:commons-httpclient:3.1 matches CVE-2012-5783 .

The getlowerThan() expression contains "==3.1"