diff options
| -rw-r--r-- | android/config/dependency-check-suppression.xml | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml index afc1b5ea89..29a8839744 100644 --- a/android/config/dependency-check-suppression.xml +++ b/android/config/dependency-check-suppression.xml @@ -2,10 +2,12 @@ <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd"> <suppress> <notes><![CDATA[ - This CVE is a false positive as javalite isn't affected according to: - https://cloud.google.com/support/bulletins#gcp-2022-001 + This CVE only part of the debugAndroidTestRuntimeClasspath so suppressing in automatic + checks and tracking externally. + + File name: protobuf-lite-3.0.1.jar ]]></notes> - <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> + <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-lite@.*$</packageUrl> <cve>CVE-2021-22569</cve> </suppress> <suppress> |