Skip to content

Commit 03f307d

Browse files
chore: update suppressions (#15)
1 parent 158e967 commit 03f307d

File tree

1 file changed

+3
-10
lines changed

1 file changed

+3
-10
lines changed

owasp-suppressions.xml

Lines changed: 3 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
<cpe>cpe:/a:service_project:service</cpe>
1111
<cpe>cpe:/a:processing:processing</cpe>
1212
</suppress>
13-
<suppress until="2023-11-30Z">
13+
<suppress until="2023-12-31Z">
1414
<notes><![CDATA[
1515
Doesn't appear to be a real vulnerability, jackson maintainers discuss at https://github.com/FasterXML/jackson-databind/issues/3973
1616
Revisit when suppression expires
@@ -19,14 +19,7 @@
1919
</packageUrl>
2020
<cve>CVE-2023-35116</cve>
2121
</suppress>
22-
<suppress>
23-
<notes><![CDATA[
24-
Minor vuln in server does not impact postgres driver
25-
]]></notes>
26-
<packageUrl regex="true">^pkg:maven/org\.postgresql/postgresql@.*$</packageUrl>
27-
<cve>CVE-2020-21469</cve>
28-
</suppress>
29-
<suppress until="2023-11-30Z">
22+
<suppress until="2023-12-31Z">
3023
<notes><![CDATA[
3124
This vulnerability is disputed, with the argument that SSL configuration is the responsibility of the client rather
3225
than the transport. The change in default is under consideration for the next major Netty release, revisit then.
@@ -38,7 +31,7 @@
3831
<packageUrl regex="true">^pkg:maven/io\.netty/netty.*@.*$</packageUrl>
3932
<vulnerabilityName>CVE-2023-4586</vulnerabilityName>
4033
</suppress>
41-
<suppress until="2023-11-30Z">
34+
<suppress until="2023-12-31Z">
4235
<notes><![CDATA[
4336
This CVE is declared fixed from 9.4.52, but the vuln db is not reflecting that. Suppress that specific version until
4437
db is updated.

0 commit comments

Comments
 (0)