hs.hsadmin.ng/etc/owasp-dependency-check-suppression.xml
Michael Hoennig a7ffee9348 dependency-versions-upgrade and exclusion (#144)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: #144
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-01-09 09:28:30 +01:00

21 lines
817 B
XML

<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
Internal tooling, not exposed to the Internet.
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.pitest/pitest\-command\-line@.*$</packageUrl>
<cpe>cpe:/a:line:line</cpe>
</suppress>
<suppress>
<notes><![CDATA[
file name: logback-core-1.5.12.jar
A successful attack requires the user to have write access to a configuration file or environment vars.
]]></notes>
<packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback-core@.*$</packageUrl>
<cpe>cpe:/a:qos:logback</cpe>
<cve>CVE-2024-12798</cve>
</suppress>
</suppressions>