Skip to content

Commit 67fd0f0

Browse files
authored
Suppress invalid CVE (#3141)
1 parent a6226a4 commit 67fd0f0

File tree

1 file changed

+5
-13
lines changed

1 file changed

+5
-13
lines changed
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,10 @@
11
<?xml version="1.0" encoding="UTF-8"?>
22
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
33
<suppress>
4-
<notes>commons-codec should not be matched to commons_net</notes>
5-
<packageUrl regex="true">^pkg:maven/commons-codec/commons-codec@.*$</packageUrl>
6-
<cpe>cpe:/a:apache:commons_net</cpe>
7-
</suppress>
8-
<suppress>
9-
<notes>commons-text should not be matched to commons_net</notes>
10-
<packageUrl regex="true">^pkg:maven/org.apache.commons/commons-text@.*$</packageUrl>
11-
<cpe>cpe:/a:apache:commons_net</cpe>
12-
</suppress>
13-
<suppress>
14-
<notes>jcl-over-slf4j should not be matched to commons_net</notes>
15-
<packageUrl regex="true">^pkg:maven/org.slf4j/jcl-over-slf4j@.*$</packageUrl>
16-
<cpe>cpe:/a:apache:commons_net</cpe>
4+
<notes>
5+
CVE-2023-35116 is not a valid CVE, see comment from library maintainer
6+
https://github.com/FasterXML/jackson-databind/issues/3972#issuecomment-1596308216
7+
</notes>
8+
<cve>CVE-2023-35116</cve>
179
</suppress>
1810
</suppressions>

0 commit comments

Comments
 (0)