Skip to content

Commit 1415373

Browse files
committed
Suppress kotlin vulnerability CVE-2020-15824 as kotlin is not used in our actually applications at all. Also bump gradle up while we're at it.
1 parent 8037922 commit 1415373

File tree

2 files changed

+9
-1
lines changed

2 files changed

+9
-1
lines changed
+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
distributionBase=GRADLE_USER_HOME
22
distributionPath=wrapper/dists
3-
distributionUrl=https\://services.gradle.org/distributions/gradle-6.5-bin.zip
3+
distributionUrl=https\://services.gradle.org/distributions/gradle-6.6-bin.zip
44
zipStoreBase=GRADLE_USER_HOME
55
zipStorePath=wrapper/dists

owasp-suppressions.xml

+8
Original file line numberDiff line numberDiff line change
@@ -262,4 +262,12 @@
262262
<vulnerabilityName>CVE-2020-7663</vulnerabilityName>
263263
</suppress>
264264

265+
<suppress>
266+
<notes><![CDATA[
267+
file name: kotlin-*-1.3.72.jar
268+
]]></notes>
269+
<filePath regex="true">.*\bkotlin-.*-1\.3\.72\.jar</filePath>
270+
<cve>CVE-2020-15824</cve>
271+
</suppress>
272+
265273
</suppressions>

0 commit comments

Comments
 (0)