-
Notifications
You must be signed in to change notification settings - Fork 25
/
owasp-suppressions.xml
39 lines (39 loc) · 1.48 KB
/
owasp-suppressions.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<!-- Ignored Vulnerabilities -->
<suppress>
<!-- semver: ReDos related -->
<notes><![CDATA[file name: semver:5.7.1]]></notes>
<packageUrl regex="true">^pkg:npm/semver@.*$</packageUrl>
<vulnerabilityName>CVE-2022-25883</vulnerabilityName>
<vulnerabilityName>GHSA-c2qf-rxjj-qqgw</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: axios:0.21.4]]></notes>
<packageUrl regex="true">^pkg:npm/axios@.*$</packageUrl>
<vulnerabilityName>CVE-2023-45857</vulnerabilityName>
<vulnerabilityName>GHSA-wf5p-g6vw-rhxx</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: follow-redirects:1.15.2]]></notes>
<packageUrl regex="true">^pkg:npm/follow\-redirects@.*$</packageUrl>
<cve>CVE-2023-26159</cve>
<vulnerabilityName>GHSA-jchw-25xp-jwwc</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: app.js]]></notes>
<packageUrl regex="true">^pkg:javascript/angularjs@.*$</packageUrl>
<cve>CVE-2022-25844</cve>
</suppress>
<suppress>
<notes><![CDATA[file name: app.js]]></notes>
<packageUrl regex="true">^pkg:javascript/angularjs@.*$</packageUrl>
<cve>CVE-2024-21490</cve>
</suppress>
<suppress>
<notes><![CDATA[file name: helper.js]]></notes>
<packageUrl regex="true">^pkg:javascript/lodash@.*$</packageUrl>
<cve>CVE-2019-10744</cve>
<cve>CVE-2021-23337</cve>
</suppress>
</suppressions>