deps: more problems with snakeyml

apache · Jan 11, 2023 · 87d4070 · 87d4070
1 parent 3912533
commit 87d4070
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/...heckstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-5.x.xml b/...heckstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-5.x.xml
@@ -11,6 +11,16 @@
     <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
     <vulnerabilityName>CVE-2022-1471</vulnerabilityName>
   </suppress>
+  <suppress>
+    <notes><![CDATA[ file name: snakeyaml-1.33.jar ]]></notes>
+    <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
+    <vulnerabilityName>CVE-2021-4235</vulnerabilityName>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[ file name: snakeyaml-1.33.jar ]]></notes>
+    <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
+    <vulnerabilityName>CVE-2022-3064</vulnerabilityName>
+  </suppress>
   <suppress>
     <notes><![CDATA[ file name: commons-*.jar ]]></notes>
     <packageUrl regex="true">^pkg:maven/commons\-.*/commons\-.*@.*$</packageUrl>