Skip to content

Commit b4986fe

Browse files
committed
Add vulnerabilities to ignored list
1 parent 9553094 commit b4986fe

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

log4j-parent/osv-scanner.toml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,3 +32,9 @@ reason = "log4j:log4j is a test dependency used in performance comparisons"
3232
[[IgnoredVulns]]
3333
id = "GHSA-59j4-wjwp-mw9m"
3434
reason = "Velocity templates are only used at build time and modifiable by committers."
35+
[[IgnoredVulns]]
36+
id = "GHSA-m9p2-j4hg-g373"
37+
reason = "The CVE doesn't even mention Cassandra 3.x."
38+
[[IgnoredVulns]]
39+
id = "GHSA-w77p-8cfg-2x43"
40+
reason = "Risk is tolerable for the project. Users need to use functionality explicitly."

0 commit comments

Comments
 (0)