Apache
/
druid
mirror of https://github.com/apache/druid.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Suppress CVEs (#12590)

This commit is contained in:
AmatyaAvadhanula 2022-06-01 21:22:32 +05:30 committed by GitHub
parent dc0fdfec67
commit f7ce73eee7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 34 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
owasp-dependency-check-suppressions.xml
View File

@ -71,6 +71,7 @@
]]></notes> ]]></notes>
<packageUrl regex="true">^pkg:maven/net\.minidev/json\-smart@.*$</packageUrl> <packageUrl regex="true">^pkg:maven/net\.minidev/json\-smart@.*$</packageUrl>
<cve>CVE-2021-27568</cve> <cve>CVE-2021-27568</cve>
<cve>CVE-2021-31684</cve>
</suppress> </suppress>
@ -340,6 +341,7 @@
<cve>CVE-2018-11765</cve> <cve>CVE-2018-11765</cve>
<cve>CVE-2020-9492</cve> <cve>CVE-2020-9492</cve>
<cve>CVE-2022-26612</cve> <cve>CVE-2022-26612</cve>
<cve>CVE-2018-8009</cve>
</suppress> </suppress>
<suppress> <suppress>
<notes><![CDATA[ <notes><![CDATA[
@ -528,4 +530,36 @@
<cve>CVE-2021-44878</cve> <cve>CVE-2021-44878</cve>
</suppress> </suppress>
<suppress>
<!-- cassandra-all-1.0.8.jar -->
<notes><![CDATA[
file name: cassandra-all-1.0.8.jar
]]></notes>
<cve>CVE-2020-17516</cve>
</suppress>
<suppress>
<!-- jackson-dataformat-cbor-2.10.5.jar -->
<notes><![CDATA[
file name: jackson-dataformat-cbor-2.10.5.jar
]]></notes>
<cve>CVE-2020-28491</cve>
</suppress>
<suppress>
<!-- okhttp -->
<notes><![CDATA[
file name: okhttp-*.jar
]]></notes>
<cve>CVE-2021-0341</cve>
</suppress>
<suppress>
<!-- parquet-format-structures-1.12.0.jar -->
<notes><![CDATA[
file name: parquet-format-structures-1.12.0.jar
]]></notes>
<cve>CVE-2021-41561</cve>
</suppress>
</suppressions> </suppressions>