Merge pull request #1502 from macfarla/sup

add suppression for snakeyaml 1.33 for a new CVE
Consensys · Nov 15, 2022 · 00aa7fa · 00aa7fa
2 parents f4d6636 + 458a976
commit 00aa7fa
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/cvss-suppressions.xml b/cvss-suppressions.xml
@@ -28,6 +28,13 @@
     <suppress>
         <notes><![CDATA[
    file name: snakeyaml-1.33.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org.yaml/snakeyaml@1.33</packageUrl>
+        <cve>CVE-2022-41854</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+   file name: snakeyaml-1.33.jar
    ]]></notes>
         <packageUrl regex="true">^pkg:maven/org.yaml/snakeyaml@1.33</packageUrl>
         <cve>CVE-2022-38752</cve>