commit 0aa2a8e2c641aa8eb8722b76b205f70f7bbff8cf
author Jonathan Wei <jon-wei@users.noreply.github.com> Wed Oct 07 21:55:34 2020 -0700
committer GitHub <noreply@github.com> Wed Oct 07 21:55:34 2020 -0700
tree f6d130b534ed273a997ddc0b831f56d1dee08c33
parent 7ce9ac4548a4ec0c60ec7cf6dcfcd45eac6fd54e

Suppress CVE-2018-11765 for hadoop dependencies (#10485)

owasp-dependency-check-suppressions.xml

diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 998e5c6..6a532ef 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -281,4 +281,11 @@
      <cve>CVE-2018-8009</cve>
      <cve>CVE-2018-8029</cve>
   </suppress>
+  <suppress>
+     <notes><![CDATA[
+     file name: hadoop-*-2.8.5.jar
+     ]]></notes>
+     <packageUrl regex="true">^pkg:maven/org\.apache\.hadoop/hadoop\-.*@.*$</packageUrl>
+     <cve>CVE-2018-11765</cve>
+  </suppress>
 </suppressions>