Merge pull request #1512 from antonydenyer/master

Suppress CVE-2021-4277
Consensys · Jan 10, 2023 · 0f2ec33 · 0f2ec33
2 parents 5aa8369 + ed371dd
commit 0f2ec33
Showing 1 changed file with 8 additions and 12 deletions.
diff --git a/cvss-suppressions.xml b/cvss-suppressions.xml
@@ -30,20 +30,10 @@
    ]]></notes>
         <packageUrl regex="true">^pkg:maven/org.yaml/[email protected]</packageUrl>
         <cve>CVE-2022-41854</cve>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[
-   file name: snakeyaml-1.33.jar
-   ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org.yaml/[email protected]</packageUrl>
+        <cve>CVE-2022-3064</cve>
         <cve>CVE-2022-38752</cve>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[
-   file name: snakeyaml-1.33.jar
-   ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org.yaml/[email protected]</packageUrl>
         <cve>CVE-2022-1471</cve>
+        <cve>CVE-2021-4235</cve>
     </suppress>
     <suppress>
         <notes><![CDATA[
@@ -60,4 +50,10 @@
         <packageUrl regex="true">^pkg:maven/org\.slf4j/[email protected]</packageUrl>
         <cve>CVE-2021-37533</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+   file name: eclipselink-utils.jar (project :eclipselink-utils)
+   ]]></notes>
+        <cve>CVE-2021-4277</cve>
+    </suppress>
 </suppressions>