summaryrefslogtreecommitdiffhomepage
path: root/android
diff options
context:
space:
mode:
Diffstat (limited to 'android')
-rw-r--r--android/config/dependency-check-suppression.xml10
-rw-r--r--android/test/test-suppression.xml10
2 files changed, 0 insertions, 20 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml
index c7fd525968..cfc9a57563 100644
--- a/android/config/dependency-check-suppression.xml
+++ b/android/config/dependency-check-suppression.xml
@@ -8,16 +8,6 @@
<packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$</packageUrl>
<cve>CVE-2022-24329</cve>
</suppress>
- <suppress until="2024-06-01Z">
- <notes><![CDATA[
- This CVE only affect the leakCanary build type which is limited to memory leak testing etc.
- This will most likely be solved by bumping to a future version of the leakcanary dependency
- where a fixed version of okio is used.
- https://nvd.nist.gov/vuln/detail/CVE-2023-3635
- ]]></notes>
- <packageUrl regex="true">^pkg:maven/com\.squareup\.okio/okio@.*$</packageUrl>
- <cve>CVE-2023-3635</cve>
- </suppress>
<suppress until="2024-09-01Z">
<notes><![CDATA[
This CVE only affect programs using loadXML and is derived from using ksp.
diff --git a/android/test/test-suppression.xml b/android/test/test-suppression.xml
index 2e379e9062..ef8f8c4702 100644
--- a/android/test/test-suppression.xml
+++ b/android/test/test-suppression.xml
@@ -1,15 +1,5 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
- <suppress until="2024-06-01Z">
- <notes><![CDATA[
- This CVE only affect the leakCanary build type which is limited to memory leak testing etc.
- This will most likely be solved by bumping to a future version of the leakcanary dependency
- where a fixed version of okio is used.
- https://nvd.nist.gov/vuln/detail/CVE-2023-3635
- ]]></notes>
- <packageUrl regex="true">^pkg:maven/com\.squareup\.okio/okio.*@.*$</packageUrl>
- <cve>CVE-2023-3635</cve>
- </suppress>
<suppress until="2024-09-01Z">
<notes><![CDATA[
False-positive related to Drupal rather than Android development.