This repository has been archived by the owner on Jan 12, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 28
/
dependency-check-supressions.xml
54 lines (53 loc) · 1.95 KB
/
dependency-check-supressions.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
<?xml version="1.0" encoding="UTF-8"?>
<!--
~ Copyright (c) 2020 Nike, inc.
~
~ Licensed under the Apache License, Version 2.0 (the "License")
~ you may not use this file except in compliance with the License.
~ You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License.
-->
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
file name: css-what:3.4.2
]]></notes>
<packageUrl regex="true">^pkg:npm/css\-what@.*$</packageUrl>
<cve>CVE-2021-33587</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: glob-parent:3.1.0
]]></notes>
<packageUrl regex="true">^pkg:npm/glob\-parent@.*$</packageUrl>
<vulnerabilityName>CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[
file name: kotlin-stdlib-1.4.32.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib@.*$</packageUrl>
<cve>CVE-2020-15824</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: kotlin-stdlib-common-1.4.32.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib\-common@.*$</packageUrl>
<cve>CVE-2020-15824</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: ansi-html:0.0.7
]]></notes>
<packageUrl regex="true">^pkg:npm/ansi\-html@.*$</packageUrl>
<cve>CVE-2021-23424</cve>
</suppress>
</suppressions>