dependencyCheck-suppression.xml

<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
  <suppress>
    <notes><![CDATA[
      file name: logback-jackson-0.1.5.jar
      ]]>
    </notes>
    <packageUrl regex="true">^pkg:maven/ch\.qos\.logback\.contrib/logback\-jackson@.*$</packageUrl>
    <cve>CVE-2017-5929</cve>
    <cve>CVE-2021-42550</cve>
  </suppress>
  <suppress>
    <notes><![CDATA[
      file name: logback-json-classic-0.1.5.jar
      ]]>
    </notes>
    <packageUrl regex="true">^pkg:maven/ch\.qos\.logback\.contrib/logback\-json\-classic@.*$</packageUrl>
    <cpe>cpe:/a:qos:logback</cpe>
  </suppress>
  <suppress>
    <notes><![CDATA[
      file name: logback-json-core-0.1.5.jar
      ]]>
    </notes>
    <packageUrl regex="true">^pkg:maven/ch\.qos\.logback\.contrib/logback\-json\-core@.*$</packageUrl>
    <cpe>cpe:/a:qos:logback</cpe>
  </suppress>
</suppressions>