Suppress false positive CVE-2024-21907 (#111)

Suppress low confidence erroneous match of Newtonsoft.Json.Schema.dll to CVE for Newtonsoft.Json. The Newtonsoft.Json upgrade was done in #103
finos · Feb 8, 2024 · 135aaf6 · 135aaf6
1 parent 5081c26
commit 135aaf6
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.cve/allow-list.xml b/.cve/allow-list.xml
@@ -30,4 +30,11 @@
    ]]></notes>
    <cpe>cpe:/a:morgan_project:morgan</cpe>
 </suppress>
+<suppress>
+   <notes><![CDATA[
+   file name: Newtonsoft.Json.Schema.dll
+   ]]></notes>
+   <packageUrl regex="true">^pkg:generic/Newtonsoft\.Json\.Schema@.*$</packageUrl>
+   <cve>CVE-2024-21907</cve>
+</suppress>
 </suppressions>