Suppress owasp log4j-api warning

Exploit is in log4j-core
DDS-GmbH · Dec 21, 2021 · e8106e8 · e8106e8
1 parent e42cdc4
commit e8106e8
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/config/dependency-check/suppression.xml b/config/dependency-check/suppression.xml
@@ -1,3 +1,10 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+    <suppress>
+        <notes><![CDATA[
+   file name: log4j-api-2.14.1.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.apache\.logging\.log4j/log4j\-api@.*$</packageUrl>
+        <cpe>cpe:/a:apache:log4j</cpe>
+    </suppress>
 </suppressions>