Ignore CVE-2018-8088 related to slf4j ext

6 years ago · ee4cb71052
parent 77ca475fbe
commit ee4cb71052
1 changed files with 5 additions and 0 deletions
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@ -149,4 +149,9 @@
       <gav regex="true">^javax\.xml\.stream:stax.*$</gav>
       <cve>CVE-2017-16224</cve>
    </suppress>
+    <suppress>
+       <notes><![CDATA[We do not use slf4j ext]]></notes>
+       <gav regex="true">.*slf4j.*</gav>
+       <cve>CVE-2018-8088</cve>
+    </suppress>
 </suppressions>