summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorDavid Göransson <david.goransson@mullvad.net>2024-06-26 16:15:01 +0200
committerDavid Göransson <david.goransson@mullvad.net>2024-06-27 09:34:01 +0200
commit7a96890f2bb603bf2ead718b175b5b92c2495e8e (patch)
tree5e54c5cd2d0f1e51cbb0732f63bc51f20062c1a9
parente16fe39567941d515915959877ca71700be65fc6 (diff)
downloadmullvadvpn-7a96890f2bb603bf2ead718b175b5b92c2495e8e.tar.xz
mullvadvpn-7a96890f2bb603bf2ead718b175b5b92c2495e8e.zip
Suppress false-postive CVE
-rw-r--r--android/config/dependency-check-suppression.xml7
1 files changed, 7 insertions, 0 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml
index 589b5d5317..f2b34872e8 100644
--- a/android/config/dependency-check-suppression.xml
+++ b/android/config/dependency-check-suppression.xml
@@ -41,4 +41,11 @@
<cve>CVE-2023-33953</cve>
<cve>CVE-2023-44487</cve>
</suppress>
+ <suppress until="2024-12-26Z">
+ <notes><![CDATA[
+ False-positive related to a NodeJS library and not the one we use.
+ ]]></notes>
+ <packageUrl regex="true">^pkg:maven/commons\-validator/commons\-validator@.*$</packageUrl>
+ <cve>CVE-2021-3765</cve>
+ </suppress>
</suppressions>