Skip to content

Commit d35feea

Browse files
labkey-adamSigmonia
authored andcommitted
Suppress erroneous labkey-client-api "CVEs"
1 parent 580860d commit d35feea

File tree

1 file changed

+25
-0
lines changed

1 file changed

+25
-0
lines changed

dependencyCheckSuppression.xml

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -160,4 +160,29 @@
160160
<packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-catalina@.*$</packageUrl>
161161
<vulnerabilityName>CVE-2024-56337</vulnerabilityName>
162162
</suppress>
163+
164+
<!--
165+
False positives: labkey-api-client.jar is getting tagged as an old version of LabKey Server
166+
-->
167+
<suppress>
168+
<notes><![CDATA[
169+
file name: labkey-client-api-6.2.0.jar
170+
]]></notes>
171+
<packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-client-api@.*$</packageUrl>
172+
<cve>CVE-2019-3911</cve>
173+
</suppress>
174+
<suppress>
175+
<notes><![CDATA[
176+
file name: labkey-client-api-6.2.0.jar
177+
]]></notes>
178+
<packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-client-api@.*$</packageUrl>
179+
<cve>CVE-2019-3912</cve>
180+
</suppress>
181+
<suppress>
182+
<notes><![CDATA[
183+
file name: labkey-client-api-6.2.0.jar
184+
]]></notes>
185+
<packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-client-api@.*$</packageUrl>
186+
<cve>CVE-2019-3913</cve>
187+
</suppress>
163188
</suppressions>

0 commit comments

Comments
 (0)