CipherStream/CipherStreamAPI
1
0
Fork 0
Code Issues 3 Packages Projects Releases 1 Wiki Activity

Update dependency issues

Browse Source
This commit is contained in:
Matthew Ellison
2026-01-31 18:58:26 -05:00
parent 0d49fbe0da
commit 3fec7b2755
2 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
dependencySuppression.xml Normal file
View File

@@ -0,0 +1,16 @@
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
Spring Boot devs say this is not a problem
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.springframework/spring\-web@.*$</packageUrl>
<cve>CVE-2016-1000027</cve>
</suppress>
<suppress>
<notes><![CDATA[
False positive, CVE only affects plugins and devtools are not included in production builds
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.springframework\.boot/spring-boot-devtools@.*$</packageUrl>
<cve>CVE-2022-31691</cve>
</suppress>
</suppressions>

4
pom.xml
View File

@@ -71,7 +71,6 @@
<groupId>org.springframework.boot</groupId> <groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-devtools</artifactId> <artifactId>spring-boot-devtools</artifactId>
<optional>true</optional> <optional>true</optional>
<scope>runtime</scope>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.springframework.boot</groupId> <groupId>org.springframework.boot</groupId>
@@ -342,6 +341,9 @@
<nvdApiServerId>nvd</nvdApiServerId> <nvdApiServerId>nvd</nvdApiServerId>
<failBuildOnCVSS>7</failBuildOnCVSS> <failBuildOnCVSS>7</failBuildOnCVSS>
<ossIndexServerId>ossindex</ossIndexServerId> <ossIndexServerId>ossindex</ossIndexServerId>
<suppressionFiles>
<suppressionFile>${project.basedir}/dependencySuppression.xml</suppressionFile>
</suppressionFiles>
</configuration> </configuration>
</plugin> </plugin>
</plugins> </plugins>