Skip to content

Commit 7a9f61c

Browse files
committed
Suppress CVE-2023-35116 as it is a false-positive per issue jeremylong/DependencyCheck#5779
1 parent 5faee76 commit 7a9f61c

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

src/test/resources/owasp-dependency-check.xml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,8 @@
44
<notes>Spring Boot application only use SnakeYaml to parse application.yaml files, which should be trusted.</notes>
55
<cve>CVE-2022-1471</cve>
66
</suppress>
7+
<suppress>
8+
<notes>False-Positive per issue https://github.com/jeremylong/DependencyCheck/issues/5779</notes>
9+
<cve>CVE-2023-35116</cve>
10+
</suppress>
711
</suppressions>

0 commit comments

Comments
 (0)