Skip to content

Commit e76b87f

Browse files
authored
Suppress CVE-2022-46337 and CVEs below score of 9 for the patch branch (#15524)
Suppress CVE-2022-46337 and CVEs below score of 9 for the patch branch
1 parent 8a78de4 commit e76b87f

File tree

2 files changed

+9
-1
lines changed

2 files changed

+9
-1
lines changed

owasp-dependency-check-suppressions.xml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -847,4 +847,12 @@
847847
]]></notes>
848848
<cve>CVE-2023-31582</cve>
849849
</suppress>
850+
851+
<!--
852+
~ CVE-2022-46337 applies to configurations using authentication for Derby and is not applicable to Druid. Also, Derby isn't a suggested
853+
~ metadata store for production clusters.
854+
-->
855+
<suppress>
856+
<cve>CVE-2022-46337</cve>
857+
</suppress>
850858
</suppressions>

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1630,7 +1630,7 @@
16301630
<artifactId>dependency-check-maven</artifactId>
16311631
<version>7.4.4</version>
16321632
<configuration>
1633-
<failBuildOnCVSS>7</failBuildOnCVSS>
1633+
<failBuildOnCVSS>9</failBuildOnCVSS>
16341634
<skipProvidedScope>true</skipProvidedScope>
16351635
<skipSystemScope>true</skipSystemScope> <!-- avoid error when processing jdk.tools:jdk.tools:jar:1.8:system -->
16361636
<!-- For node analysis info, see https://github.com/jeremylong/DependencyCheck/issues/2482#issuecomment-603755623 -->

0 commit comments

Comments
 (0)