summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEnrico Olivelli <eolivelli@apache.org>2022-02-25 07:59:07 +0100
committerEnrico Olivelli <eolivelli@apache.org>2022-02-25 07:59:07 +0100
commit3004c909b78b3056985c8e39925e14bde3baa430 (patch)
treed31e3bc1dec4e8e01ad6b0fcfdc67a49ffe13345
parentbce2bf42361163a2c026fb0d629edc22f2fb1c73 (diff)
downloadzookeeper-3004c909b78b3056985c8e39925e14bde3baa430.tar.gz
ZOOKEEPER-4478: Suppress OWASP false positives zookeeper-jute-3.8.0-SNAPSHOT.jar: CVE-2021-29425, CVE-2021-28164, CVE-2021-34429
Author: Enrico Olivelli <eolivelli@apache.org> Reviewers: Mate Szalay-Beko <symat@apache.org> Closes #1824 from eolivelli/ZOOKEEPER-4478-owasp
-rw-r--r--owaspSuppressions.xml9
1 files changed, 9 insertions, 0 deletions
diff --git a/owaspSuppressions.xml b/owaspSuppressions.xml
index 4bfec6fd2..1325af983 100644
--- a/owaspSuppressions.xml
+++ b/owaspSuppressions.xml
@@ -53,4 +53,13 @@
this writing -->
<cve>CVE-2019-3826</cve>
</suppress>
+
+
+ <suppress>
+ <!-- Seems like false positives about zookeeper-jute -->
+ <cve>CVE-2021-29425</cve>
+ <cve>CVE-2021-28164</cve>
+ <cve>CVE-2021-34429</cve>
+ </suppress>
+
</suppressions>