-
Notifications
You must be signed in to change notification settings - Fork 13
/
suppression.xml
19 lines (19 loc) · 742 Bytes
/
suppression.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<?xml version="1.0" encoding="UTF-8"?>
<!-- This file lists false positives found by org.owasp:dependency-check-maven build plugin -->
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
vulnerable code neither used nor exposed (and removed during repackaging)
]]></notes>
<gav regex="true">org\.bouncycastle:bcprov-jdk15on:.*</gav>
<cve>CVE-2023-33201</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: bcprov-jdk15on-1.70.jar
Reason: PEMParser is not used
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.bouncycastle/bcprov\-jdk15on@.*$</packageUrl>
<cve>CVE-2023-33202</cve>
</suppress>
</suppressions>