summaryrefslogtreecommitdiffhomepage
path: root/android/test/test-suppression.xml
diff options
context:
space:
mode:
Diffstat (limited to 'android/test/test-suppression.xml')
-rw-r--r--android/test/test-suppression.xml10
1 files changed, 10 insertions, 0 deletions
diff --git a/android/test/test-suppression.xml b/android/test/test-suppression.xml
index 1a3614b6a9..526f89a2c5 100644
--- a/android/test/test-suppression.xml
+++ b/android/test/test-suppression.xml
@@ -92,4 +92,14 @@
<packageUrl regex="true">^pkg:maven/com\.android\.tools/common@.*$</packageUrl>
<cve>CVE-2021-4277</cve>
</suppress>
+ <suppress until="2023-12-01Z">
+ <notes><![CDATA[
+ This CVE only affect the leakCanary build type which is limited to memory leak testing etc.
+ This will most likely be solved by bumping to a future version of the leakcanary dependency
+ where a fixed version of okio is used.
+ https://nvd.nist.gov/vuln/detail/CVE-2023-3635
+ ]]></notes>
+ <packageUrl regex="true">^pkg:maven/com\.squareup\.okio/okio.*@.*$</packageUrl>
+ <cve>CVE-2023-3635</cve>
+ </suppress>
</suppressions>