Skip to content

Commit 1f46150

Browse files
committed
gh-151 Suppress invalid CVE report for Jackson Databind
1 parent 67e80ea commit 1f46150

File tree

2 files changed

+7
-2
lines changed

2 files changed

+7
-2
lines changed

Diff for: pom.xml

+1-1
Original file line numberDiff line numberDiff line change
@@ -117,7 +117,7 @@
117117
<flatten-maven-plugin.version>1.2.7</flatten-maven-plugin.version>
118118
<github.site-maven-plugin.version>0.12</github.site-maven-plugin.version>
119119
<maven-compiler-plugin.version>3.8.1</maven-compiler-plugin.version>
120-
<dependency-check-maven.version>8.2.1</dependency-check-maven.version>
120+
<dependency-check-maven.version>8.3.1</dependency-check-maven.version>
121121
<maven-checkstyle-plugin.version>3.1.2</maven-checkstyle-plugin.version>
122122
<maven-compiler-plugin.version>3.8.1</maven-compiler-plugin.version>
123123
<maven-deploy-plugin.version>2.8.2</maven-deploy-plugin.version>

Diff for: src/main/config/dependency-check-suppression.xml

+6-1
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,6 @@
77
-->
88

99
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
10-
1110
<suppress>
1211
<notes><![CDATA[
1312
file name: snakeyaml-1.33.jar
@@ -17,4 +16,10 @@
1716
]]></notes>
1817
<cve>CVE-2022-1471</cve>
1918
</suppress>
19+
<suppress>
20+
<notes><![CDATA[ jackson-databind-2.15.2.jar
21+
Invalid - see: https://github.com/FasterXML/jackson-databind/issues/3997
22+
]]></notes>
23+
<cve>CVE-2023-35116</cve>
24+
</suppress>
2025
</suppressions>

0 commit comments

Comments
 (0)