File tree 2 files changed +7
-7
lines changed
2 files changed +7
-7
lines changed Original file line number Diff line number Diff line change 1
1
<?xml version =" 1.0" encoding =" UTF-8" ?>
2
2
<suppressions xmlns =" https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd" >
3
- <suppress until =" 2024-12 -01Z" >
3
+ <suppress until =" 2025-03 -01Z" >
4
4
<notes ><![CDATA[
5
5
This and all other supressions in this file are for dependencies only used for tests.
6
6
These should be excluded by the plugin but this behaviour is broken.
15
15
<cve >CVE-2022-41915</cve >
16
16
<cve >CVE-2024-47535</cve >
17
17
</suppress >
18
- <suppress until =" 2024-12 -01Z" >
18
+ <suppress until =" 2025-03 -01Z" >
19
19
<notes ><![CDATA[
20
20
This and all other supressions in this file are for dependencies only used for tests.
21
21
These should be excluded by the plugin but this behaviour is broken.
27
27
<cve >CVE-2022-3510</cve >
28
28
<cve >CVE-2021-22569</cve >
29
29
</suppress >
30
- <suppress until =" 2024-12 -01Z" >
30
+ <suppress until =" 2025-03 -01Z" >
31
31
<notes ><![CDATA[
32
32
This and all other supressions in this file are for dependencies only used for tests.
33
33
These should be excluded by the plugin but this behaviour is broken.
Original file line number Diff line number Diff line change 8
8
<packageUrl regex =" true" >^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$</packageUrl >
9
9
<cve >CVE-2022-24329</cve >
10
10
</suppress >
11
- <suppress until =" 2024-12 -01Z" >
11
+ <suppress until =" 2025-03 -01Z" >
12
12
<notes ><![CDATA[
13
13
This CVE only affect programs using loadXML and is derived from using ksp.
14
14
We do not use the loadXML, ksp is used to generate navigation paths in our code
17
17
<packageUrl regex =" true" >^pkg:maven/com\.google\.devtools\.ksp/symbol\-processing.*@.*$</packageUrl >
18
18
<cve >CVE-2018-1000840</cve >
19
19
</suppress >
20
- <suppress until =" 2024-12 -01Z" >
20
+ <suppress until =" 2025-03 -01Z" >
21
21
<notes ><![CDATA[
22
22
False-positive only affecting javascript gRPC packages.
23
23
]]> </notes >
24
24
<packageUrl regex =" true" >^pkg:maven/io\.grpc/protoc\-gen\-grpc\-kotlin@.*$</packageUrl >
25
25
<cve >CVE-2020-7768</cve >
26
26
</suppress >
27
- <suppress until =" 2024-12 -01Z" >
27
+ <suppress until =" 2025-03 -01Z" >
28
28
<notes ><![CDATA[
29
29
No impact on this app since it uses UDS rather than HTTP2.
30
30
]]> </notes >
40
40
<packageUrl regex =" true" >^pkg:maven/commons\-validator/commons\-validator@.*$</packageUrl >
41
41
<cve >CVE-2021-3765</cve >
42
42
</suppress >
43
- <suppress until =" 2024-12 -01Z" >
43
+ <suppress until =" 2025-03 -01Z" >
44
44
<notes ><![CDATA[
45
45
Denial of service using protobuf.
46
46
Should not be applicable since client and server are always in sync and we are only
You can’t perform that action at this time.
0 commit comments