Skip to content

Commit bc97a1d

Browse files
committed
🔒 Suppress false positives for h2 and guava
1 parent a121bfb commit bc97a1d

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

dependency-check-suppressions.xml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@
66
]]></notes>
77
<packageUrl regex="true">^pkg:maven/com\.h2database/h2@.*$</packageUrl>
88
<vulnerabilityName>CVE-2022-45868</vulnerabilityName>
9+
<vulnerabilityName>CVE-2018-14335</vulnerabilityName>
910
</suppress>
1011
<suppress>
1112
<notes><![CDATA[
@@ -31,4 +32,11 @@
3132
<packageUrl regex="true">^(?!pkg:maven/org\.json/json@).+$</packageUrl>
3233
<cpe>cpe:/a:json-java_project:json-java</cpe>
3334
</suppress>
35+
<suppress>
36+
<notes><![CDATA[
37+
file name: guava-31.1-jre.jar
38+
]]></notes>
39+
<packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
40+
<vulnerabilityName>CVE-2020-8908</vulnerabilityName>
41+
</suppress>
3442
</suppressions>

0 commit comments

Comments
 (0)