From 8c97c5686edcdef62dd99e5875516b8e561e5a71 Mon Sep 17 00:00:00 2001 From: Vaadin Bot Date: Tue, 8 Aug 2023 09:35:30 +0200 Subject: [PATCH] chore: test FP (#4373) (#4374) Co-authored-by: Zhe Sun <31067185+ZheSun88@users.noreply.github.com> --- scripts/generateAndCheckSBOM.js | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/scripts/generateAndCheckSBOM.js b/scripts/generateAndCheckSBOM.js index 0850a64bb..e2925d21f 100755 --- a/scripts/generateAndCheckSBOM.js +++ b/scripts/generateAndCheckSBOM.js @@ -48,9 +48,7 @@ const cveWhiteList = { // Check fix in vaadin-testbench/pom.xml, and update when Selenium is fixed // 'pkg:maven/com.google.guava/guava@31.1-jre': ['CVE-2020-8908', 'CVE-2023-2976'] // exclude jackson-databind:2.15.2, as https://github.com/jeremylong/DependencyCheck/issues/5779 - 'pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2': ['CVE-2023-35116'], - // false report from owasp, the CVEs are regarding flow-server and vaadin-text-field-flow with bad version range - 'pkg:maven/com.vaadin/vaadin-swing-kit-flow@2.1.0': ['CVE-2021-31411', 'CVE-2020-36321', 'CVE-2021-31405', 'CVE-2021-31407', 'CVE-2021-31412', 'CVE-2021-31404', 'CVE-2021-33604'] + 'pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2': ['CVE-2023-35116'] } const STYLE = `