Skip to content

Commit 507f05c

Browse files
authored
Suppress FP for oracle xml database server (helidon-io#10040)
1 parent b6ae4f1 commit 507f05c

1 file changed

Lines changed: 21 additions & 0 deletions

File tree

etc/dependency-check-suppression.xml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -210,4 +210,25 @@ https://github.com/jeremylong/DependencyCheck/issues/7019
210210
<cve>CVE-2019-3826</cve>
211211
</suppress>
212212

213+
<!-- False Positives.
214+
This CVE is against the XML Database component of Oracle Database Server.
215+
The below are client libraries for XML and XML JDBC support.
216+
-->
217+
218+
<suppress>
219+
<notes><![CDATA[
220+
file name: xdb-23.6.0.24.10.jar
221+
]]></notes>
222+
<packageUrl regex="true">^pkg:maven/com\.oracle\.database\.xml/xdb@.*$</packageUrl>
223+
<cve>CVE-2025-30694</cve>
224+
</suppress>
225+
<suppress>
226+
<notes><![CDATA[
227+
file name: xmlparserv2_sans_jaxp_services-23.6.0.24.10.jar
228+
]]></notes>
229+
<packageUrl regex="true">^pkg:maven/com\.oracle\.database\.xml/xmlparserv2_sans_jaxp_services@.*$</packageUrl>
230+
<cve>CVE-2025-30694</cve>
231+
</suppress>
232+
233+
213234
</suppressions>

0 commit comments

Comments
 (0)