diff options
| author | Albin <albin@mullvad.net> | 2024-10-04 15:41:02 +0200 |
|---|---|---|
| committer | Albin <albin@mullvad.net> | 2024-10-04 17:23:31 +0200 |
| commit | 94c1b2c0ac9edbec8dbe3f092d43b382aa74e0e1 (patch) | |
| tree | f3f731ef53486c5faec123e0e3ce69080f300675 /android/config | |
| parent | a93f452b6f19de409b09f83c6a58c94fe803cbff (diff) | |
| download | mullvadvpn-94c1b2c0ac9edbec8dbe3f092d43b382aa74e0e1.tar.xz mullvadvpn-94c1b2c0ac9edbec8dbe3f092d43b382aa74e0e1.zip | |
Suppress CVE-2024-47554
Diffstat (limited to 'android/config')
| -rw-r--r-- | android/config/dependency-check-suppression.xml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml index 2462a467ba..3b03ea05c0 100644 --- a/android/config/dependency-check-suppression.xml +++ b/android/config/dependency-check-suppression.xml @@ -49,4 +49,11 @@ <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf-.*@.*$</packageUrl> <cve>CVE-2024-7254</cve> </suppress> + <suppress until="2025-01-04Z"> + <notes><![CDATA[ + No impact since the app doesn't process externally crafted XML. + ]]></notes> + <packageUrl regex="true">^pkg:maven/commons-io/commons-io@.*$</packageUrl> + <cve>CVE-2024-47554</cve> + </suppress> </suppressions> |