rewrite/suppressions.xml at main · openrewrite/rewrite · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
    <suppress until="2026-05-01Z">
        <notes><![CDATA[
           file name: launcher-interface-1.4.4.jar
           reason: false positive on the regex pattern of impacted modules → sbt tool is at 1.10.4 whereas this vulnerability has been patched in version 1.9.7.
           ]]></notes>
        <packageUrl regex="true">^pkg:maven/org\.scala-sbt/launcher-interface@.*$</packageUrl>
        <cve>CVE-2023-46122</cve>
    </suppress>
    <suppress until="2026-05-01Z">
        <notes><![CDATA[
           file name: sbinary_2.13-0.5.1.jar
           reason: false positive on the regex pattern of impacted modules → sbt tool is at 1.10.4 whereas this vulnerability has been patched in version 1.9.7.
           ]]></notes>
        <packageUrl regex="true">^pkg:maven/org\.scala-sbt/sbinary_2\.13@.*$</packageUrl>
        <cve>CVE-2023-46122</cve>
    </suppress>
</suppressions>