Suppress additonal snakeyaml warnings

Consensys · Jan 10, 2023 · ed371dd · ed371dd
1 parent fef558d
commit ed371dd
Showing 1 changed file with 2 additions and 13 deletions.
diff --git a/cvss-suppressions.xml b/cvss-suppressions.xml
@@ -30,20 +30,10 @@
    ]]></notes>
         <packageUrl regex="true">^pkg:maven/org.yaml/[email protected]</packageUrl>
         <cve>CVE-2022-41854</cve>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[
-   file name: snakeyaml-1.33.jar
-   ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org.yaml/[email protected]</packageUrl>
+        <cve>CVE-2022-3064</cve>
         <cve>CVE-2022-38752</cve>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[
-   file name: snakeyaml-1.33.jar
-   ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org.yaml/[email protected]</packageUrl>
         <cve>CVE-2022-1471</cve>
+        <cve>CVE-2021-4235</cve>
     </suppress>
     <suppress>
         <notes><![CDATA[
@@ -64,7 +54,6 @@
         <notes><![CDATA[
    file name: eclipselink-utils.jar (project :eclipselink-utils)
    ]]></notes>
-        <packageUrl regex="true">^pkg:maven/net\.consensys\.quorum\.tessera/eclipselink\-utils@.*$</packageUrl>
         <cve>CVE-2021-4277</cve>
     </suppress>
 </suppressions>