Update dependency issues
This commit is contained in:
16
dependencySuppression.xml
Normal file
16
dependencySuppression.xml
Normal file
@@ -0,0 +1,16 @@
|
||||
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
|
||||
<suppress>
|
||||
<notes><![CDATA[
|
||||
Spring Boot devs say this is not a problem
|
||||
]]></notes>
|
||||
<packageUrl regex="true">^pkg:maven/org\.springframework/spring\-web@.*$</packageUrl>
|
||||
<cve>CVE-2016-1000027</cve>
|
||||
</suppress>
|
||||
<suppress>
|
||||
<notes><![CDATA[
|
||||
False positive, CVE only affects plugins and devtools are not included in production builds
|
||||
]]></notes>
|
||||
<packageUrl regex="true">^pkg:maven/org\.springframework\.boot/spring-boot-devtools@.*$</packageUrl>
|
||||
<cve>CVE-2022-31691</cve>
|
||||
</suppress>
|
||||
</suppressions>
|
||||
Reference in New Issue
Block a user