Fix for false positive node vuln

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
6 years ago · 5281d9ab6e
parent caa1dac3a2
commit 5281d9ab6e
1 changed files with 5 additions and 0 deletions
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@ -134,4 +134,9 @@
       <gav regex="true">^ant-zip:ant-zip:.*$</gav>
       <cve>CVE-2018-13684</cve>
    </suppress>
+    <suppress>
+       <notes><![CDATA[False Positive for stax]]></notes>
+       <gav regex="true">^stax.*$</gav>
+       <cve>CVE-2017-16224</cve>
+    </suppress>
 </suppressions>