suppress false positive

cherry picked from 9bd5b45ea7
This commit is contained in:
Armin Schrenk 2023-08-04 17:01:19 +02:00
parent 9ae9473b95
commit da21c7fa80
No known key found for this signature in database
GPG Key ID: 8F2992163CBBA7FC

View File

@ -63,4 +63,11 @@
<cve>CVE-2023-35116</cve>
</suppress>
</suppressions>
<suppress>
<notes><![CDATA[
False positive for jackrabbit-webdav-2.21.15.jar. This component is not affected, see https://lists.apache.org/thread/j03b3qdhborc2jrhdc4d765d3jkh8bfw
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.jackrabbit/jackrabbit\-webdav@.*$</packageUrl>
<cve>CVE-2023-37895</cve>
</suppress>
</suppressions>