Update dependency issues

This commit is contained in:
2026-01-31 18:58:26 -05:00
parent 0d49fbe0da
commit 3fec7b2755
2 changed files with 19 additions and 1 deletions

16
dependencySuppression.xml Normal file
View File

@@ -0,0 +1,16 @@
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
Spring Boot devs say this is not a problem
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.springframework/spring\-web@.*$</packageUrl>
<cve>CVE-2016-1000027</cve>
</suppress>
<suppress>
<notes><![CDATA[
False positive, CVE only affects plugins and devtools are not included in production builds
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.springframework\.boot/spring-boot-devtools@.*$</packageUrl>
<cve>CVE-2022-31691</cve>
</suppress>
</suppressions>