Skip to content

Commit d59a3d0

Browse files
committed
Suppress CVE-2023-35116 as it is a false-positive per issue jeremylong/DependencyCheck#5779
1 parent d95d564 commit d59a3d0

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

src/test/resources/owasp-dependency-check.xml

+4
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,8 @@
44
<notes>Spring Boot application only use SnakeYaml to parse application.yaml files, which should be trusted.</notes>
55
<cve>CVE-2022-1471</cve>
66
</suppress>
7+
<suppress>
8+
<notes>False-Positive per issue https://github.com/jeremylong/DependencyCheck/issues/5779</notes>
9+
<cve>CVE-2023-35116</cve>
10+
</suppress>
711
</suppressions>

0 commit comments

Comments
 (0)