Suppress CVE-2018-13684 for dependency-check

False positive matching ant-zip against a CVE for ZIP, an Ethereum
token.

Signed-off-by: Peter Marheine <peter@taricorp.net>
master
Peter Marheine 6 years ago committed by Andrew DeMaria
parent 467d9420b7
commit cfdedea452
  1. 5
      airsonic-main/cve-suppressed.xml

@ -129,4 +129,9 @@
<gav regex="true">^org\.mariadb\.jdbc:mariadb-java-client:.*$</gav> <gav regex="true">^org\.mariadb\.jdbc:mariadb-java-client:.*$</gav>
<cve>CVE-2017-16046</cve> <cve>CVE-2017-16046</cve>
</suppress> </suppress>
<suppress>
<notes><![CDATA[file name: ant-zip-1.6.2.jar]]></notes>
<gav regex="true">^ant-zip:ant-zip:.*$</gav>
<cve>CVE-2018-13684</cve>
</suppress>
</suppressions> </suppressions>

Loading…
Cancel
Save