Add quartz vulnerability to the ignore list

ballerina-platform · Oct 2, 2023 · e7137ad · e7137ad
1 parent dcfc203
commit e7137ad
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/.trivyignore b/.trivyignore
@@ -7,3 +7,6 @@ GMS-2022-7
 
 # com.github.docker-java:docker-java:3.1.5
 CVE-2020-13956
+
+# quartz:2.3.2
+CVE-2023-39017
diff --git a/gradle/javaLibsProject.gradle b/gradle/javaLibsProject.gradle
@@ -35,6 +35,7 @@ dependencies {
     dist 'org.jvnet.mimepull:mimepull:1.9.7'
     dist 'jakarta.activation:jakarta.activation-api:1.2.2'
     dist 'org.wso2.carbon:org.wso2.carbon.core:5.1.0'
+    dist 'org.quartz-scheduler:quartz:2.3.2'
     dist 'org.wso2.securevault:org.wso2.securevault:1.0.0-wso2v2'
     dist 'org.wso2.transport.file:org.wso2.transport.local-file-system:6.0.55'
     dist 'org.wso2.transport.http:org.wso2.transport.http.netty:6.3.46'

diff --git a/gradle/javaProject.gradle b/gradle/javaProject.gradle
@@ -101,7 +101,8 @@ dependencies {
         implementation 'org.wso2.transport.http:org.wso2.transport.http.netty:6.3.46'
         implementation 'org.wso2.transport.file:org.wso2.transport.local-file-system:6.0.55'
         implementation 'org.wso2.staxon:staxon-core:1.2.0.wso2v2'
-
+        implementation 'org.quartz-scheduler:quartz:2.3.2'
+
         implementation 'info.picocli:picocli:4.0.1'
         implementation 'io.ballerina.messaging:broker-common:0.970.5'
         implementation 'io.ballerina.messaging:broker-core:0.970.5'