With deeply nested dependency trees, dependency coordinates (usually the dependency version) get truncated to .. which causes Snyk to display false positives.
This happens due to the limitation on the width of the sbt terminal where Snyk runs the dependencyTree command. To mitigate this problem, please set the sbt attribute asciiGraphWidth := 999999999 either globally or in the build.sbt file.