Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Is there some way we can get the frama-c package off of the list of packages to be scanned for JavaScript vulnerabilities? The JavaScript bits of this package are not, and will not be, used to build the package and are not, and will not be, shipped with any binary RPM built from the package.