Sourced from org.owasp:dependency-check-maven's releases.

Version 12.1.2

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.1.2 (2025-06-07)

• fix: Allow configuring OSS Index user/pw directly (#7640)
• fix: remove vulnerable transitive dependency - beanutils (#7705)
• fix: Simplify PHP framework suppression for Composer (#7693)
• fix: update CPE pattern to remove FP (#7684)
• fix(cli): Patch generated Windows shell script for JAVACMD installs with spaces (#7653)
• fix: Resolve various WCAG accessibility / css issues in the HTML report (#7629)
• fix: #7510 Display a dedicated message when receiving an HTTP 403 (#7575)
• docs: Make Vulnerability Sources in Related Work clearer (#7691)
• docs: #7610 add a reference to NVD mirroring in getting started documentation (#7611)

See the full listing of changes

• 4744206 build: prepare release v12.1.2
• 624c3ca docs: release 12.1.2
• ce126c7 build(deps-dev): bump io.netty:netty-codec-http from 4.2.1.Final to 4.2.2.Fin...
• 9c1312a Merge branch 'main' into dependabot/maven/io.netty-netty-codec-http-4.2.2.Final
• a6abd65 build(deps): bump golang from 1.24.3-alpine to 1.24.4-alpine (#7710)
• 4cde0d7 build(deps-dev): bump io.netty:netty-codec-http
• 116fdab build(deps): bump golang from 1.24.3-alpine to 1.24.4-alpine
• f551343 fix(fp): remove iicu4j FP (#7707)
• 6296163 fix(fp): remove iicu4j FP
• 0e0cd58 fix: remove vulnerable transitive dependency - beanutils (#7705)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)