code: private void checkForFailure(Dependency[] dependencies) throws BuildException {
          final StringBuilder ids = new StringBuilder();
          for (Dependency d : dependencies) {
              for (Vulnerability v : d.getVulnerabilities()) {
                  if ((v.getCvssV2() != null && v.getCvssV2().getScore() >= failBuildOnCVSS)
                          || (v.getCvssV3() != null && v.getCvssV3().getBaseScore() >= failBuildOnCVSS)) {
                      if (ids.length() == 0) {
                          ids.append(v.getName());
                      } else {
                          ids.append(", ").append(v.getName());
                      }
                  }
              }
          }
          if (ids.length() > 0) {
              final String msg;
              if (showSummary) {
                  msg = String.format("%n%nDependency-Check Failure:%n"
                          + "One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '%.1f': %s%n"
                          + "See the dependency-check report for more details.%n%n", failBuildOnCVSS, ids.toString());
              } else {
                  msg = String.format("%n%nDependency-Check Failure:%n"
                          + "One or more dependencies were identified with vulnerabilities.%n%n"
                          + "See the dependency-check report for more details.%n%n");
              }
              throw new BuildException(msg);
          }
      }
docs: Checks to see if a vulnerability has been identified with a CVSS score
  that is above the threshold set in the configuration.
  
  @param dependencies the list of dependency objects
  @throws BuildException thrown if a CVSS score is found that is higher
  than the threshold set