Apache
/
druid
mirror of https://github.com/apache/druid.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Suppress Avro CVEs (#12166)

This commit is contained in:
Abhishek Agarwal 2022-01-18 21:09:48 +05:30 committed by GitHub
parent bd7fe45da0
commit 7bdb9ebdf1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
owasp-dependency-check-suppressions.xml
View File

@ -462,4 +462,12 @@
<cve>CVE-2015-7430</cve> <cve>CVE-2015-7430</cve>
<cve>CVE-2017-3162</cve> <cve>CVE-2017-3162</cve>
</suppress> </suppress>
<suppress>
<!-- Suppress avro cves that are only applicable to .NET SDK-->
<notes><![CDATA[
file name: avro-1.9.2.jar or avro-ipc-jetty-1.9.2.jar
]]></notes>
<cve>CVE-2021-43045</cve>
</suppress>
</suppressions> </suppressions>