hostsharing/hs.hsadmin.ng
1
0
Fork 0
Code Activity

dependency upgrades and suppress irrelevant security vulnerability in jackson-databind

Browse Source
This commit is contained in:
Michael Hoennig
2022-10-05 06:31:53 +02:00
parent a93143ff00
commit 398f15d5de
3 changed files with 15 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
etc/owasp-dependency-check-suppression.xml
View File

@ -7,4 +7,11 @@
<packageUrl regex="true">^pkg:maven/org\.springframework/spring-web@.*$</packageUrl>
<cve>CVE-2016-1000027</cve>
</suppress>
<suppress>
<notes><![CDATA[
We don't use the UNWRAP_SINGLE_VALUE_ARRAYS feature and thus are not affected.
]]></notes>
<packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@.*$</packageUrl>
<cve>CVE-2022-42003</cve>
</suppress>
</suppressions>