Skip to content

Commit

Permalink
CVE-2023-34034: False Positive. Added to suppressions
Browse files Browse the repository at this point in the history
  • Loading branch information
tonydamage committed Sep 4, 2023
1 parent eb25c00 commit 7bfb240
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions config/false-positives.xml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,13 @@
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<!-- IMPORTANT: It may be bit weird, having first reason for suppresion, then the issue suppresed, but dependency-chek uses strict schema and they decided on that order of elements. When any of suppresion has notes and cve reordered, it will not load suppression file
-->

<suppress>
<notes>
False Positive. midPoint uses Spring Security, but does not use Spring WebFlux, so it is unaffected.
</notes>
<cve>CVE-2023-34034</cve>
</suppress>
<suppress>
<notes>
False Positive. H2 is not recommended for production use, only for demo testing use-cases.
Expand Down

0 comments on commit 7bfb240

Please sign in to comment.