Skip to content

Commit 67b11b6

Browse files
committed
chore: suppress CVE-2016-1000027 OWASP detection in Spring libs (see spring-projects/spring-framework#24434)
1 parent 09f0747 commit 67b11b6

File tree

2 files changed

+7
-2
lines changed

2 files changed

+7
-2
lines changed

owasp-suppression.xml

+6-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
~ specific language governing permissions and limitations
1818
~ under the License.
1919
-->
20-
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
20+
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
2121

2222
<suppress>
2323
<notes><![CDATA[ Drupal issues for AWS is not relevant here ]]></notes>
@@ -27,4 +27,9 @@
2727
<notes><![CDATA[ Drupal issues for AWS is not relevant here ]]></notes>
2828
<cpe>cpe:/a:restful_web_services_project:restful_web_services:7.x-2.1::~~~drupal~~</cpe>
2929
</suppress>
30+
<suppress>
31+
<notes><![CDATA[Ignored since we are not vulnerable, see spring-projects/spring-framework/issues/24434]]></notes>
32+
<packageUrl regex="true">^pkg:maven/org\.springframework/spring.*$</packageUrl>
33+
<cve>CVE-2016-1000027</cve>
34+
</suppress>
3035
</suppressions>

pom.xml

+1-1
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@
8181

8282
<properties>
8383
<jacoco.minCoverage>0.7</jacoco.minCoverage>
84-
<dependencyCheck.version>6.5.3</dependencyCheck.version>
84+
<dependencyCheck.version>7.1.0</dependencyCheck.version>
8585
<jackson.version>2.13.3</jackson.version>
8686
<slf4j.version>1.7.36</slf4j.version>
8787
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

0 commit comments

Comments
 (0)