Skip to content
This repository has been archived by the owner on Apr 5, 2024. It is now read-only.

Commit

Permalink
update suppression dates
Browse files Browse the repository at this point in the history
  • Loading branch information
jframe committed Apr 4, 2024
1 parent c113624 commit 9d7cc8a
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 5 deletions.
8 changes: 4 additions & 4 deletions gradle/owasp-suppression.xml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<!-- See https://jeremylong.github.io/DependencyCheck/general/suppression.html for examples -->
<suppress until="2024-03-16">
<suppress until="2024-06-16">
<notes><![CDATA[
Suppress CVE-2023-36415 as this should only be applicable on version up to but excluding 1.10.2.
https://github.com/jeremylong/DependencyCheck/issues/5992
Expand All @@ -26,21 +26,21 @@
]]></notes>
<cve>CVE-2020-8908</cve>
</suppress>
<suppress until="2024-03-16">
<suppress until="2024-06-16">
<notes><![CDATA[
FP per issue #6100 - CVE-2023-36052 since it is related to Azure-cli not to the azure-core libraries
]]></notes>
<packageUrl regex="true">^pkg:maven/com\.azure/azure*@*.*$</packageUrl>
<cve>CVE-2023-36052</cve>
</suppress>
<suppress until="2024-03-16">
<suppress until="2024-06-16">
<notes><![CDATA[
CVE relates to attach on gRPC servers (not clients) and is dependent on the Netty version used
]]></notes>
<packageUrl regex="true">^pkg:maven/io\.grpc/grpc\-.*$</packageUrl>
<cve>CVE-2023-44487</cve>
</suppress>
<suppress until="2024-03-16">
<suppress until="2024-06-16">
<notes><![CDATA[
CVE relates to usage hostname verification when using TLS and doesn't apply as we use Tuweni for this
]]></notes>
Expand Down
2 changes: 1 addition & 1 deletion gradle/versions.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ dependencyManagement {

dependency 'io.rest-assured:rest-assured:4.4.0'

dependencySet(group: 'io.vertx', version: '4.4.6') {
dependencySet(group: 'io.vertx', version: '4.4.9') {
entry 'vertx-codegen'
entry 'vertx-core'
entry 'vertx-unit'
Expand Down

0 comments on commit 9d7cc8a

Please sign in to comment.