False Positive on batik-i18n

[dr0ps]

False positive on library batik-i18n.jar - reported as cpe:2.3:a:i18n_project:i18n::::::asp.net::*

<dependency>
    <groupId>org.apache.xmlgraphics</groupId>
    <artifactId>batik-i18n</artifactId>
    <version>1.14</version>
</dependency>

The issue is in turquoiseowl/i18n#387 and not in batik-i18n

[kwwall]

I just got this for ESAPI as well using 6.1.6 version of Dependency Check. Seems like maybe the entire CPE should be used for the matching criteria. The 'asp.net::*' at the end seems like a dead give away that it should apply to Java and if one looks at the details of CVE-2020-7791, the current description references two C# source files which also confirms this is an FP.

[jellisgwn]

Will attempt to provide a PR to exclude this tomorrow.