Skip to content
This repository was archived by the owner on Oct 11, 2025. It is now read-only.

Commit 3823887

Browse files
committed
🔒 Add suppression for false-positives for several json libraries
1 parent de1fda8 commit 3823887

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

dependency-check-suppressions.xml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,4 +24,11 @@
2424
<vulnerabilityName>CVE-2022-3064</vulnerabilityName>
2525
<vulnerabilityName>CVE-2021-4235</vulnerabilityName>
2626
</suppress>
27+
<suppress>
28+
<notes><![CDATA[
29+
suppress various improper matches to the CPE that belongs only to pkg:maven/org.json/json
30+
]]></notes>
31+
<packageUrl regex="true">^(?!pkg:maven/org\.json/json@).+$</packageUrl>
32+
<cpe>cpe:/a:json-java_project:json-java</cpe>
33+
</suppress>
2734
</suppressions>

0 commit comments

Comments
 (0)