Suppress CVE-2018-13684 for dependency-check

False positive matching ant-zip against a CVE for ZIP, an Ethereum token. Signed-off-by: Peter Marheine <peter@taricorp.net>
2018-07-31 12:00:05 -06:00
parent 467d9420b7
commit cfdedea452
1 changed files with 5 additions and 0 deletions
@@ -129,4 +129,9 @@
        <gav regex="true">^org\.mariadb\.jdbc:mariadb-java-client:.*$</gav>
        <cve>CVE-2017-16046</cve>
    </suppress>
+    <suppress>
+       <notes><![CDATA[file name: ant-zip-1.6.2.jar]]></notes>
+       <gav regex="true">^ant-zip:ant-zip:.*$</gav>
+       <cve>CVE-2018-13684</cve>
+    </suppress>
 </suppressions>