File tree 1 file changed +3
-7
lines changed
1 file changed +3
-7
lines changed Original file line number Diff line number Diff line change 1
1
<?xml version =" 1.0" encoding =" UTF-8" ?>
2
2
<suppressions xmlns =" https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd" >
3
3
<!-- See https://jeremylong.github.io/DependencyCheck/general/suppression.html for examples -->
4
-
5
4
<suppress >
6
5
<notes ><![CDATA[
7
- Suppress false positive for CVE-2020-8908 as it is only applicable for versions up to 30.0. We use 31.1.
8
- Our code does not use com.google.common.io.Files.createTempDir() as well.
9
- - https://nvd.nist.gov/vuln/detail/cve-2020-8908
10
- - https://github.com/jeremylong/DependencyCheck/issues/5526
11
- - https://github.com/google/guava/issues/4011
6
+ Suppress CVE-2023-35116 as this is not considered a CVE according to discussion in https://github.com/FasterXML/jackson-databind/issues/3972
12
7
]]> </notes >
13
- <cve >CVE-2020-8908</cve >
8
+ <packageUrl regex =" true" >^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@.*$</packageUrl >
9
+ <vulnerabilityName >CVE-2023-35116</vulnerabilityName >
14
10
</suppress >
15
11
</suppressions >
You can’t perform that action at this time.
0 commit comments