Suppress false-positive CVE-2014-9152

mullvad · Mar 11, 2024 · 5940635 · 5940635
1 parent 9e2a90a
commit 5940635
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml
@@ -60,4 +60,12 @@
         <packageUrl regex="true">^pkg:maven/com\.google\.devtools\.ksp/symbol\-processing.*@.*$</packageUrl>
         <cve>CVE-2018-1000840</cve>
     </suppress>
+    <suppress until="2024-09-01Z">
+        <notes><![CDATA[
+            False-positive related to Drupal rather than Android development.
+            https://nvd.nist.gov/vuln/detail/CVE-2014-9152
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/androidx\.test\.services/storage@.*$</packageUrl>
+        <cve>CVE-2014-9152</cve>
+    </suppress>
 </suppressions>
diff --git a/android/test/test-suppression.xml b/android/test/test-suppression.xml
@@ -110,4 +110,12 @@
         <packageUrl regex="true">^pkg:maven/com\.squareup\.okhttp3/.*@.*$</packageUrl>
         <cve>CVE-2023-3782</cve>
     </suppress>
+    <suppress until="2024-09-01Z">
+        <notes><![CDATA[
+            False-positive related to Drupal rather than Android development.
+            https://nvd.nist.gov/vuln/detail/CVE-2014-9152
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/androidx\.test\.services/storage@.*$</packageUrl>
+        <cve>CVE-2014-9152</cve>
+    </suppress>
 </suppressions>