MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Suppress CVE-2018-13684 for dependency-check

Browse Source 
False positive matching ant-zip against a CVE for ZIP, an Ethereum
token.

Signed-off-by: Peter Marheine <peter@taricorp.net>
This commit is contained in:
Peter Marheine
2018-07-31 12:00:05 -06:00
committed by Andrew DeMaria
parent 467d9420b7
commit cfdedea452
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
airsonic-main/cve-suppressed.xml
+5
View File
@@ -129,4 +129,9 @@
<gav regex="true">^org\.mariadb\.jdbc:mariadb-java-client:.*$</gav> <gav regex="true">^org\.mariadb\.jdbc:mariadb-java-client:.*$</gav>
<cve>CVE-2017-16046</cve> <cve>CVE-2017-16046</cve>
</suppress> </suppress>
<suppress>
<notes><![CDATA[file name: ant-zip-1.6.2.jar]]></notes>
<gav regex="true">^ant-zip:ant-zip:.*$</gav>
<cve>CVE-2018-13684</cve>
</suppress>
</suppressions> </suppressions>