Skip to content
This repository was archived by the owner on Feb 17, 2025. It is now read-only.

Commit e57ec63

Browse files
authored
fix: #4321 Suppress redis server CVEs for client libraries (#4321) (#6489)
1 parent 04aff68 commit e57ec63

File tree

1 file changed

+22
-1
lines changed

1 file changed

+22
-1
lines changed

core/src/main/resources/dependencycheck-base-suppression.xml

Lines changed: 22 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6870,6 +6870,27 @@
68706870
<packageUrl regex="true">^pkg:maven/software\.amazon\.awssdk\.crt/aws-crt@.*$</packageUrl>
68716871
<cpe>cpe:/a:amazon:aws-sdk-java</cpe>
68726872
</suppress>
6873-
<!-- end generated suppressions added to main in 8.4.0 -->
6873+
<!-- end generated suppressions added to main in 8.4.0 -->
6874+
<suppress base="true">
6875+
<notes><![CDATA[
6876+
FP per #4321
6877+
]]></notes>
6878+
<packageUrl regex="true">^pkg:(pypi/redis|generic/Microsoft\.Extensions\.Caching\.StackExchangeRedis|generic/HealthChecks\.Redis)@.*$</packageUrl>
6879+
<cve>CVE-2021-32626</cve>
6880+
<cve>CVE-2021-32627</cve>
6881+
<cve>CVE-2021-32628</cve>
6882+
<cve>CVE-2021-32675</cve>
6883+
<cve>CVE-2021-32687</cve>
6884+
<cve>CVE-2021-32762</cve>
6885+
<cve>CVE-2021-41099</cve>
6886+
<cve>CVE-2022-24735</cve>
6887+
<cve>CVE-2022-24834</cve>
6888+
<cve>CVE-2021-31294</cve>
6889+
<cve>CVE-2021-32672</cve>
6890+
<cve>CVE-2022-24736</cve>
6891+
<cve>CVE-2022-36021</cve>
6892+
<cve>CVE-2023-25155</cve>
6893+
<cve>CVE-2023-28856</cve>
6894+
</suppress>
68746895

68756896
</suppressions>

0 commit comments

Comments
 (0)