other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml

<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd"
              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
              xsi:schemaLocation="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
  <suppress>
    <notes><![CDATA[ file name: jdom2-2.0.6.jar ]]></notes>
    <packageUrl regex="true">^pkg:maven/org\.jdom/jdom2@.*$</packageUrl>
    <cve>CVE-2021-33813</cve>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: xbean-asm6-shaded-4.5.jar ]]></notes>
    <gav regex="true">^org\.apache\.xbean:xbean-asm6-shaded:.*$</gav>
    <cpe>cpe:/a:apache:geronimo</cpe>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: xbean-asm5-shaded-4.1.jar ]]></notes>
    <gav regex="true">^org\.apache\.xbean:xbean-asm5-shaded:.*$</gav>
    <cpe>cpe:/a:apache:geronimo</cpe>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: xbean-finder-shaded-4.1.jar ]]></notes>
    <gav regex="true">^org\.apache\.xbean:xbean-finder-shaded:.*$</gav>
    <cpe>cpe:/a:apache:geronimo</cpe>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: xbean-finder-shaded-4.5.jar ]]></notes>
    <gav regex="true">^org\.apache\.xbean:xbean-finder-shaded:.*$</gav>
    <cpe>cpe:/a:finder_project:finder</cpe>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: geronimo-el_2.2_spec-1.0.4.jar ]]></notes>
    <gav regex="true">^org\.apache\.geronimo\.specs:geronimo-el_2\.2_spec:.*$</gav>
    <cpe>cpe:/a:apache:geronimo</cpe>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: geronimo-servlet_3.0_spec-1.0.jar ]]></notes>
    <gav regex="true">^org\.apache\.geronimo\.specs:geronimo-servlet_3\.0_spec:.*$</gav>
    <cpe>cpe:/a:apache:geronimo</cpe>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: geronimo-validation_1.1_spec-1.0.jar ]]></notes>
    <gav regex="true">^org\.apache\.geronimo\.specs:geronimo-validation_1\.1_spec:.*$</gav>
    <cve>CVE-2013-4499</cve>
  </suppress>
  <suppress>
    <notes><![CDATA[ file name: org.apache.myfaces.tobago:tobago-tool-test:4.3.1 ]]></notes>
    <gav regex="true">^org\.apache\.myfaces\.tobago:tobago-tool-test:.*$</gav>
    <cve>CVE-2007-1349</cve>
  </suppress>
  <suppress>
    <!-- the problem is fixed in 2.0.25 - https://issues.apache.org/jira/browse/MYFACES-4373 -->
    <notes><![CDATA[ file name: myfaces-impl-2.0.25.jar ]]></notes>
    <sha1>cef072c00fce9358be1fb26ded20ec5e38321316</sha1>
    <vulnerabilityName>CVE-2021-26296</vulnerabilityName>
  </suppress>
</suppressions>