fixed CVE

hmcts · Dec 11, 2023 · 00011c9 · 00011c9
1 parent a7c6dae
commit 00011c9
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 18 deletions.
diff --git a/build.gradle b/build.gradle
@@ -325,24 +325,6 @@ dependencyManagement {
     dependency group: 'ch.qos.logback', name: 'logback-classic', version: '1.2.13'
     dependency group: 'ch.qos.logback', name: 'logback-core', version: '1.2.13'
 
-    //CVE-2023-5072
-    dependencySet(
-      group: 'org.json',
-      version: '20231013'
-    ) {
-      entry 'json'
-    }
-
-    //CVE-2023-33202
-    dependencySet(group: 'org.bouncycastle', version: '1.77') {
-      entry 'bcprov-jdk18on'
-      entry 'bouncy-castle-crypto-package'
-      entry 'bouncy_castle_crypto_package'
-      entry 'bouncy_castle_for_java'
-      entry 'legion-of-the-bouncy-castle'
-      entry 'legion-of-the-bouncy-castle-java-crytography-api'
-      entry 'the_bouncy_castle_crypto_package_for_java'
-    }
   }
 }
 

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -12,6 +12,7 @@
     <cve>CVE-2022-3064</cve>
     <cve>CVE-2023-5072</cve>
     <cve>CVE-2023-31582</cve>
+    <cve>CVE-2023-33202</cve>
   </suppress>
     <suppress>
         <notes><![CDATA[