fix: commons net false positive

apache · Dec 9, 2022 · 3912533 · 3912533
1 parent 50954a4
commit 3912533
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/...heckstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml b/...heckstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml
@@ -58,4 +58,9 @@
     <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-.*@.*$</packageUrl>
     <cve>CVE-2021-42550</cve>
   </suppress>
+  <suppress>
+    <notes><![CDATA[ file name: commons-*.jar ]]></notes>
+    <packageUrl regex="true">^pkg:maven/.*/.*@.*$</packageUrl>
+    <cve>CVE-2021-37533</cve>
+  </suppress>
 </suppressions>