suppress clojure false-positive CVE

factorhouse · Feb 5, 2024 · acdb491 · acdb491
1 parent 73c2cf0
commit acdb491
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/slipway-jetty10/dependency-check-suppressions.xml b/slipway-jetty10/dependency-check-suppressions.xml
@@ -7,4 +7,9 @@
         <packageUrl regex="true">^pkg:maven/commons\-fileupload/commons\-fileupload@.*$</packageUrl>
         <cve>CVE-2023-24998</cve>
     </suppress>
+    <suppress>
+        <notes>Clojure false positive</notes>
+        <packageUrl regex="true">^pkg:maven/org\.clojure/.*$</packageUrl>
+        <cve>CVE-2017-20189</cve>
+    </suppress>
 </suppressions>
diff --git a/slipway-jetty11/dependency-check-suppressions.xml b/slipway-jetty11/dependency-check-suppressions.xml
@@ -7,4 +7,9 @@
         <packageUrl regex="true">^pkg:maven/commons\-fileupload/commons\-fileupload@.*$</packageUrl>
         <cve>CVE-2023-24998</cve>
     </suppress>
+    <suppress>
+        <notes>Clojure false positive</notes>
+        <packageUrl regex="true">^pkg:maven/org\.clojure/.*$</packageUrl>
+        <cve>CVE-2017-20189</cve>
+    </suppress>
 </suppressions>
diff --git a/slipway-jetty9/dependency-check-suppressions.xml b/slipway-jetty9/dependency-check-suppressions.xml
@@ -7,4 +7,9 @@
         <packageUrl regex="true">^pkg:maven/commons\-fileupload/commons\-fileupload@.*$</packageUrl>
         <cve>CVE-2023-24998</cve>
     </suppress>
+    <suppress>
+        <notes>Clojure false positive</notes>
+        <packageUrl regex="true">^pkg:maven/org\.clojure/.*$</packageUrl>
+        <cve>CVE-2017-20189</cve>
+    </suppress>
 </suppressions>