Skip to content

Commit da2b5f7

Browse files
committed
suppress CVE-2023-5072 as it's been fixed by the latest release of
org.json 20231013
1 parent c342d38 commit da2b5f7

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

etc/suppression.xml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,15 @@
22
<!-- SPDX-FileCopyrightText: 2018-2022 SAP SE or an SAP affiliate company and Cloud Security Client Java contributors -->
33
<!-- SPDX-License-Identifier: Apache-2.0 -->
44
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
5+
<suppress>
6+
<notes><![CDATA[
7+
suppresses CVE-2023-5072 as it has been fixed by the latest release 20231013 https://nvd.nist.gov/vuln/detail/CVE-2023-5072
8+
file name: json-20231013.jar
9+
]]>
10+
</notes>
11+
<packageUrl regex="true">^pkg:maven/org\.json/json@.*$</packageUrl>
12+
<vulnerabilityName>CVE-2023-5072</vulnerabilityName>
13+
</suppress>
514
<suppress>
615
<notes><![CDATA[
716
suppresses CVE-2022-45688 as the affected method is not called by code of this project.

0 commit comments

Comments
 (0)