Merge pull request #223 from okta/arvindkrishnakumar-okta-patch-5

suppress false positive cve
okta · Sep 19, 2022 · a970e9a · a970e9a
2 parents b752ab7 + 63f6baf
commit a970e9a
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/owasp/owasp-suppression.xml b/src/owasp/owasp-suppression.xml
@@ -26,5 +26,12 @@
         <cve>CVE-2016-1000027</cve>
     </suppress>
 
+    <!-- False positive, see https://github.com/jeremylong/DependencyCheck/issues/4839 -->
+    <suppress base="true">
+        <notes><![CDATA[ FP per issue #4839 ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
+        <cve>CVE-2022-38752</cve>
+    </suppress>
+
 </suppressions>