Suppress CVE-2018-8088

6 years ago · 94f4a85bb7
parent f2339e0942
commit 94f4a85bb7
1 changed files with 5 additions and 0 deletions
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@ -149,4 +149,9 @@
       <gav regex="true">^javax\.xml\.stream:stax.*$</gav>
       <cve>CVE-2017-16224</cve>
    </suppress>
+    <suppress>
+       <notes><![CDATA[We don't use EventData constructors]]></notes>
+       <gav regex="true">^org\.slf4j:.*slf4j.*:1.7.25$</gav>
+       <cve>CVE-2018-8088</cve>
+    </suppress>
 </suppressions>