Exclude new spring 5.0.5 cve

5 years ago · 54e1237320
parent 5dc96ba011
commit 54e1237320
1 changed files with 5 additions and 0 deletions
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@ -163,4 +163,9 @@
       <gav regex="true">.*slf4j.*</gav>
       <cve>CVE-2018-8088</cve>
    </suppress>
+    <suppress>
+       <notes><![CDATA[This only impacts spring 5.0.5 which we dont use]]></notes>
+       <gav regex="true">.*spring.*</gav>
+       <cve>CVE-2018-1258</cve>
+    </suppress>
 </suppressions>