Supress plexus FPs

barchetta · Oct 18, 2023 · 9b60d3e · 9b60d3e
1 parent a310ad1
commit 9b60d3e
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/etc/dependency-check-suppression.xml b/etc/dependency-check-suppression.xml
@@ -171,5 +171,14 @@
    <cve>CVE-2023-4759</cve>
 </suppress>
 
+<!--
+    These are FPs.
+    See https://github.com/jeremylong/DependencyCheck/issues/5973
+-->
+<suppress>
+    <packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-(cipher|classworlds|component-annotations|interpolation|container-default|sec-dispatcher)@.*$</packageUrl>
+    <cve>CVE-2022-4244</cve>
+    <cve>CVE-2022-4245</cve>
+</suppress>
 
 </suppressions>