File tree 1 file changed +5
-13
lines changed
1 file changed +5
-13
lines changed Original file line number Diff line number Diff line change 1
1
<?xml version =" 1.0" encoding =" UTF-8" ?>
2
2
<suppressions xmlns =" https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd" >
3
3
<suppress >
4
- <notes >commons-codec should not be matched to commons_net</notes >
5
- <packageUrl regex =" true" >^pkg:maven/commons-codec/commons-codec@.*$</packageUrl >
6
- <cpe >cpe:/a:apache:commons_net</cpe >
7
- </suppress >
8
- <suppress >
9
- <notes >commons-text should not be matched to commons_net</notes >
10
- <packageUrl regex =" true" >^pkg:maven/org.apache.commons/commons-text@.*$</packageUrl >
11
- <cpe >cpe:/a:apache:commons_net</cpe >
12
- </suppress >
13
- <suppress >
14
- <notes >jcl-over-slf4j should not be matched to commons_net</notes >
15
- <packageUrl regex =" true" >^pkg:maven/org.slf4j/jcl-over-slf4j@.*$</packageUrl >
16
- <cpe >cpe:/a:apache:commons_net</cpe >
4
+ <notes >
5
+ CVE-2023-35116 is not a valid CVE, see comment from library maintainer
6
+ https://github.com/FasterXML/jackson-databind/issues/3972#issuecomment-1596308216
7
+ </notes >
8
+ <cve >CVE-2023-35116</cve >
17
9
</suppress >
18
10
</suppressions >
You can’t perform that action at this time.
0 commit comments