Added suppression on logback-classic (#409)

Co-authored-by: djain <[email protected]>
elimuinformatics · Dec 13, 2023 · be5d79d · be5d79d
1 parent 5c0567d
commit be5d79d
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
@@ -346,4 +346,18 @@
       <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
       <cve>CVE-2023-6481</cve>
    </suppress>
+   <suppress>
+      <notes><![CDATA[
+      file name: logback-classic-1.2.12.jar
+      ]]></notes>
+      <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
+      <cve>CVE-2023-6378</cve>
+   </suppress>
+   <suppress>
+      <notes><![CDATA[
+      file name: logback-classic-1.2.12.jar
+      ]]></notes>
+      <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
+      <cve>CVE-2023-6481</cve>
+   </suppress>
 </suppressions>