dependency-check-suppressions.xml

<?xml version="1.0" encoding="UTF-8"?>
<suppressions
    xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
    <suppress>
        <notes><![CDATA[
            This suppresses an issue in Guava which affects up to version >24.1.1 however
            currently we require version 20.0 as spring fox swagger depends on it ]]>
        </notes>
        <gav regex="true">.*</gav>
        <cve>CVE-2018-10237</cve>
    </suppress>
    <suppress>
        <notes><![CDATA[
            This is exploitable in com.zaxxer.hikari.HikariConfig and com.zaxxer.hikari.HikariDataSource
            which we do not use. Pending the release of a stable jackson databind version (>2.9.9.3) ]]>
        </notes>
        <gav regex="true">.*</gav>
        <cve>CVE-2019-14540</cve>
        <cve>CVE-2019-16335</cve>
    </suppress>
</suppressions>