Suppress false positive reported by nvd scan (#182)

Closes #181
clj-commons · Oct 10, 2023 · 593f420 · 593f420
1 parent 41493e1
commit 593f420
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/nvd_check_helper_project/suppressions.xml b/nvd_check_helper_project/suppressions.xml
@@ -14,4 +14,12 @@
     <cve>CVE-2008-5729</cve>
     <cve>CVE-2008-5742</cve>
   </suppress>
+  <suppress>
+    <notes><![CDATA[
+    False positive, see https://github.com/jeremylong/DependencyCheck/issues/5973
+    ]]></notes>
+    <packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-(container-default|interpolation|interactivity-api)@.*$</packageUrl>
+    <cve>CVE-2022-4244</cve>
+    <cve>CVE-2022-4245</cve>
+  </suppress>
 </suppressions>