suppressions.xml

<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
    <suppress>
        <notes><![CDATA[
        file name: spring-data-mongodb-2.2.12.RELEASE.jar
        reason: referenced only. Not on the runtime classpath.
        ]]>
        </notes>
        <packageUrl regex="true">^pkg:maven/org\.springframework\.data/spring-data-mongodb@.*$</packageUrl>
        <cve>CVE-2022-22980</cve>
    </suppress>
    <suppress>
        <notes><![CDATA[
        file name: mongo-java-driver-3.12.14.jar
        reason: referenced only. Not on the runtime classpath.§
        ]]></notes>
        <sha1>850383a126cdc5b363fa9ffc780037f6ebeee704</sha1>
        <cpe>cpe:/a:mongodb:mongodb</cpe>
    </suppress>
    <suppress until="2024-11-25Z">
        <notes><![CDATA[
                file name: rewrite-testing-frameworks-2.20.0-SNAPSHOT.jar: wiremock-jre8-2.35.0.jar: swagger-ui-bundle.js
                false positive: js library that is shipped as part of this jar
            ]]></notes>
        <packageUrl regex="true">^pkg:javascript/DOMPurify@.*$</packageUrl>
        <vulnerabilityName>CVE-2024-45801</vulnerabilityName>
    </suppress>
</suppressions>