Skip to content

Commit

Permalink
Re-add WNPRC dependency suppression and jfreechart comment
Browse files Browse the repository at this point in the history
  • Loading branch information
labkey-adam committed Jan 9, 2025
1 parent e2384db commit 24b02c4
Show file tree
Hide file tree
Showing 2 changed files with 17 additions and 1 deletion.
16 changes: 16 additions & 0 deletions dependencyCheckSuppression.xml
Original file line number Diff line number Diff line change
Expand Up @@ -108,6 +108,19 @@
<cve>CVE-2006-5391</cve>
</suppress>

<!--
This is a dependency of Java-FPDF, used by the WNPRC billing module for PDF generation, which hasn't been updated
to reference the now-renamed Commons Imaging library instead of the old Sanselan incubator. The CVE is related
to file parsing, not generation so we're not vulnerable
-->
<suppress>
<notes><![CDATA[
file name: sanselan-0.97-incubator.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.sanselan/sanselan@.*$</packageUrl>
<vulnerabilityName>CVE-2018-17201</vulnerabilityName>
</suppress>

<!--
GraalJS shaded and re-versioned icu4j without changing the file name, leading to many old CVEs getting tagged.
This should be fixed soon, but suppress all CVEs for now. https://github.com/oracle/graal/issues/8204
Expand Down Expand Up @@ -142,6 +155,9 @@
<cpe>cpe:/a:apache:tomcat</cpe>
</suppress>

<!--
suppress CVE-2023-52070 for jfreechart, may become moot after subsequent upgrades
-->
<suppress>
<notes><![CDATA[
file name: jfreechart-1.0.19.jar
Expand Down
2 changes: 1 addition & 1 deletion gradle.properties
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
#moduleSet=all
moduleSet=all
#ideaIncludeAllModules=true
# This controls Gradle's file system watching, which improves efficiency of incremental builds
# https://docs.gradle.org/current/userguide/file_system_watching.html
Expand Down

0 comments on commit 24b02c4

Please sign in to comment.