From bdcde1519b26f122fec5e3057c7013008894d87f Mon Sep 17 00:00:00 2001
From: Michael Hoennig <michael@hoennig.de>
Date: Sun, 31 Mar 2024 14:02:57 +0200
Subject: [PATCH] remove snakeyaml exclude

---
 etc/owasp-dependency-check-suppression.xml | 13 -------------
 1 file changed, 13 deletions(-)

diff --git a/etc/owasp-dependency-check-suppression.xml b/etc/owasp-dependency-check-suppression.xml
index 39d77b47..f04711a8 100644
--- a/etc/owasp-dependency-check-suppression.xml
+++ b/etc/owasp-dependency-check-suppression.xml
@@ -49,17 +49,4 @@
         <packageUrl regex="true">^pkg:maven/org\.pitest/pitest\-command\-line@.*$</packageUrl>
         <cpe>cpe:/a:line:line</cpe>
     </suppress>
-    <suppress>
-        <notes><![CDATA[
-            Spring Boot 3.1.x has a transient dependency to snakeyaml 1.3
-            which contains this vulnerability.
-
-            We've explicitly bumped to 2.2, but the vulnerability checker does not seem to notice that.
-
-            TODO: Remove this suppression once we are on SpringBoot 3.2,
-            as well as the explicit version bump and the transient dependency exclude.
-       ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
-        <cve>CVE-2022-1471</cve>
-    </suppress>
 </suppressions>