Skip to content

Commit 7f1aa02

Browse files
fix: support for zoned iso date deser (#204)
* fix: support for zoned iso date deser * chore: update suppressions
1 parent dae8a7a commit 7f1aa02

2 files changed

Lines changed: 4 additions & 12 deletions

File tree

owasp-suppressions.xml

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,7 @@
99
<cpe>cpe:/a:utils_project:utils</cpe>
1010
<cpe>cpe:/a:processing:processing</cpe>
1111
</suppress>
12-
<suppress>
13-
<notes><![CDATA[
14-
file name: graphql-java-annotations-9.1.jar
15-
]]></notes>
16-
<packageUrl regex="true">^pkg:maven/io\.github\.graphql\-java/graphql\-java\-annotations@.*$
17-
</packageUrl>
18-
<cpe>cpe:/a:graphql-java:graphql-java</cpe>
19-
</suppress>
20-
<suppress until="2023-11-30Z">
12+
<suppress until="2023-12-31Z">
2113
<notes><![CDATA[
2214
This vulnerability is disputed, with the argument that SSL configuration is the responsibility of the client rather
2315
than the transport. The change in default is under consideration for the next major Netty release, revisit then.
@@ -29,7 +21,7 @@
2921
<packageUrl regex="true">^pkg:maven/io\.netty/netty.*@.*$</packageUrl>
3022
<vulnerabilityName>CVE-2023-4586</vulnerabilityName>
3123
</suppress>
32-
<suppress until="2023-11-30Z">
24+
<suppress until="2023-12-31Z">
3325
<notes><![CDATA[
3426
This CVE is declared fixed from 9.4.52, but the vuln db is not reflecting that. Suppress that specific version until
3527
db is updated.
@@ -39,7 +31,7 @@
3931
<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-servlets@9.4.53\..*$</packageUrl>
4032
<vulnerabilityName>CVE-2023-36479</vulnerabilityName>
4133
</suppress>
42-
<suppress until="2023-11-30Z">
34+
<suppress until="2023-12-31Z">
4335
<notes><![CDATA[
4436
file name: jackson-databind-2.15.2.jar
4537
]]></notes>

0 commit comments

Comments
 (0)