diff options
Diffstat (limited to 'android/config')
| -rw-r--r-- | android/config/dependency-check-suppression.xml | 42 |
1 files changed, 0 insertions, 42 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml index 6a9729d705..a0b1b26b37 100644 --- a/android/config/dependency-check-suppression.xml +++ b/android/config/dependency-check-suppression.xml @@ -2,39 +2,6 @@ <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd"> <suppress until="2024-05-01Z"> <notes><![CDATA[ - This CVE only part of the debugAndroidTestRuntimeClasspath so suppressing in automatic - checks and tracking externally. - - File name: guava-28.2-android.jar - ]]></notes> - <packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl> - <cve>CVE-2020-8908</cve> - </suppress> - <suppress until="2024-03-01Z"> - <notes><![CDATA[ - This CVE only part of the debugAndroidTestRuntimeClasspath so suppressing in automatic - checks and tracking externally. - - Fix released in: https://github.com/google/guava/releases/tag/v32.0.0 - - File name: guava-28.2-android.jar - ]]></notes> - <packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl> - <cve>CVE-2023-2976</cve> - </suppress> - <suppress until="2024-05-01Z"> - <notes><![CDATA[ - This CVE only part of the debugAndroidTestRuntimeClasspath so suppressing in automatic - checks and tracking externally. - - File name: jsoup-1.12.2.jar - ]]></notes> - <packageUrl regex="true">^pkg:maven/org\.jsoup/jsoup@.*$</packageUrl> - <cve>CVE-2022-36033</cve> - <cve>CVE-2021-37714</cve> - </suppress> - <suppress until="2024-05-01Z"> - <notes><![CDATA[ This CVE only affect Multiplatform Gradle Projects, which this project is not. https://nvd.nist.gov/vuln/detail/CVE-2022-24329 ]]></notes> @@ -68,13 +35,4 @@ <packageUrl regex="true">^pkg:maven/androidx\.test\.services/storage@.*$</packageUrl> <cve>CVE-2014-9152</cve> </suppress> - <suppress until="2024-05-01Z"> - <notes><![CDATA[ - Suppressing since the affected function isn't used in this project. No upstream fixes - are available at the time of adding this suppression. - https://nvd.nist.gov/vuln/detail/CVE-2024-23080 - ]]></notes> - <packageUrl regex="true">^pkg:maven/joda-time/joda-time@.*$</packageUrl> - <cve>CVE-2024-23080</cve> - </suppress> </suppressions> |