Yes, they will if we add the exception. But if the component is reported as vulnerable by the "update database" extension all the exceptions added for that component will be ignored (this is, all the rules will be applied to protect our site).
Also take note that the SQL injection has many subfilters, so you're protected against that attacks as the false positives for the main SQL filter are rare.
Regards,
Jose
