About vulnerabilities json-smart@1.3.1 on image docker

[tsukiazuma]

Hi,

I have problem about vulnerabilities json-smart@1.3.1 on image docker:

Source code not found where json-smart@1.3.1 used
Image not have vulnerabilities before build with code
But deploy code into image and scan with Trivy, it warning about json-smart@1.3.1
I tried install latest version of json-smart with pom.xml, but it doesn't work

I use harbor version 2.8.2 with default trivy v0.42.0

Is it false positive? If not, how can I do to fix it. Please