artifact version works only on lowerThan ('<=') , but match fails on '==' #1
Description
The plugin works great which builds the dependency graph and reports all CVEs on a given project. However, there is an issue with public static boolean isAffected(String fullArtifactId, String version, CveVulnerability cve) { method in VersionUtil.java , where the exact version match fails.
The issue can be reproduced by adding an artifact whose GAV matches a CVE entry in CVE-DB. For example, the GAV commons-httpclient:commons-httpclient:3.1 matches CVE-2012-5783 .
The getlowerThan() expression contains "==3.1"