Startseite Erkunden Hilfe
Registrieren Anmelden
coolbeer
/
cryptomator
Mirror von https://github.com/cryptomator/cryptomator.git
1
0
Fork 0
Dateien Issues 0 Wiki
Struktur: 7fac6da448
Branches Tags
cryptomator
/
suppression.xml

suppression.xml 2.0 KB
Verlauf Originalformat

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253 
  1. <?xml version="1.0" encoding="UTF-8"?>
    2. 

  2. <!-- This file lists false positives found by org.owasp:dependency-check-maven build plugin -->
    3. 

  3. <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
    4. 

  4. 	<suppress>
    5. 

  5. 		<notes><![CDATA[ Suppress known vulnerabilities in FUSE libraries for fuse-nio-adapter. For more info, see suppression.xml of https://github.com/cryptomator/fuse-nio-adapter ]]></notes>
    6. 

  6. 		<gav regex="true">^org\.cryptomator:fuse-nio-adapter:.*$</gav>
    7. 

  7. 		<cvssBelow>9</cvssBelow>
    8. 

  8. 	</suppress>
    9. 

  9. 	<suppress>
    10. 

  10. 		<notes><![CDATA[ Suppress known vulnerabilities in FUSE libraries for jnr-fuse (dependency of fuse-nio-adapter). ]]></notes>
    11. 

  11. 		<gav regex="true">^com\.github\.serceman:jnr-fuse:.*$</gav>
    12. 

  12. 		<cvssBelow>9</cvssBelow>
    13. 

  13. 	</suppress>
    14. 

  14. 

  15. 	<!-- Jetty false positives below -->
    16. 

  16. 	<suppress>
    17. 

  17. 		<notes><![CDATA[ Affects jetty < 6.1.22 ]]></notes>
    18. 

  18. 		<gav>org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6</gav>
    19. 

  19. 		<cve>CVE-2009-5045</cve>
    20. 

  20. 	</suppress>
    21. 

  21. 	<suppress>
    22. 

  22. 		<notes><![CDATA[ Affects jetty < 6.1.22 ]]></notes>
    23. 

  23. 		<gav>org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6</gav>
    24. 

  24. 		<cve>CVE-2009-5046</cve>
    25. 

  25. 	</suppress>
    26. 

  26. 

  27. 	<suppress>
    28. 

  28. 		<notes><![CDATA[ Affects jetty-server 9.x ]]></notes>
    29. 

  29. 		<gav>org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6</gav>
    30. 

  30. 		<cve>CVE-2017-9735</cve>
    31. 

  31. 	</suppress>
    32. 

  32. 	<suppress>
    33. 

  33. 		<notes><![CDATA[ Affects jetty-server 9.x ]]></notes>
    34. 

  34. 		<gav>org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6</gav>
    35. 

  35. 		<cve>CVE-2017-7656</cve>
    36. 

  36. 	</suppress>
    37. 

  37. 	<suppress>
    38. 

  38. 		<notes><![CDATA[ Affects jetty-server 9.x ]]></notes>
    39. 

  39. 		<gav>org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6</gav>
    40. 

  40. 		<cve>CVE-2017-7657</cve>
    41. 

  41. 	</suppress>
    42. 

  42. 	<suppress>
    43. 

  43. 		<notes><![CDATA[ Affects jetty-server 9.x ]]></notes>
    44. 

  44. 		<gav>org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6</gav>
    45. 

  45. 		<cve>CVE-2017-7658</cve>
    46. 

  46. 	</suppress>
    47. 

  47. 

  48. 	<suppress>
    49. 

  49. 		<notes><![CDATA[ Fixed since jetty-server 10.0.0.beta2 ]]></notes>
    50. 

  50. 		<gav>org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6</gav>
    51. 

  51. 		<cve>CVE-2020-27216</cve>
    52. 

  52. 	</suppress>
    53. 

  53. </suppressions>
    54.