Commit b88ac02 1 parent 193b642 commit b88ac02 Copy full SHA for b88ac02
File tree 1 file changed +0
-19
lines changed
1 file changed +0
-19
lines changed Original file line number Diff line number Diff line change 1
1
<?xml version =" 1.0" encoding =" UTF-8" ?>
2
2
<suppressions xmlns =" https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd" >
3
- <suppress until =" 2023-01-07Z" >
4
- <notes ><![CDATA[
5
- file name: woodstox-core-6.3.1.jar
6
- Severity: HIGH
7
- False positive. We do not use woodstox and it will be updated with the next spring cloud
8
- dependencies.
9
- ]]> </notes >
10
- <packageUrl regex =" true" >^pkg:maven/com\.fasterxml\.woodstox/woodstox\-core@.*$</packageUrl >
11
- <vulnerabilityName >CVE-2022-40152</vulnerabilityName >
12
- </suppress >
13
- <suppress until =" 2023-03-10Z" >
14
- <notes ><![CDATA[
15
- file name: snakeyaml-1.33.jar
16
- Severity: HIGH
17
- False positive: We are not parsing untrusted user input
18
- ]]> </notes >
19
- <packageUrl regex =" true" >^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl >
20
- <cve >CVE-2022-1471</cve >
21
- </suppress >
22
3
</suppressions >
You can’t perform that action at this time.
0 commit comments