17 lines
620 B
XML
17 lines
620 B
XML
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
|
|
<suppress>
|
|
<notes><![CDATA[
|
|
Spring Boot devs say this is not a problem
|
|
]]></notes>
|
|
<packageUrl regex="true">^pkg:maven/org\.springframework/spring\-web@.*$</packageUrl>
|
|
<cve>CVE-2016-1000027</cve>
|
|
</suppress>
|
|
<suppress>
|
|
<notes><![CDATA[
|
|
False positive, CVE only affects plugins and devtools are not included in production builds
|
|
]]></notes>
|
|
<packageUrl regex="true">^pkg:maven/org\.springframework\.boot/spring-boot-devtools@.*$</packageUrl>
|
|
<cve>CVE-2022-31691</cve>
|
|
</suppress>
|
|
</suppressions>
|