This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts-examples.git
The following commit(s) were added to refs/heads/master by this push:
new f81b451 Cleans up dependencies and suppresses false positives
f81b451 is described below
commit f81b45118a57015b86345c8afae3292e2b3a0d60
Author: Lukasz Lenart
AuthorDate: Fri Dec 2 10:46:39 2022 +0100
Cleans up dependencies and suppresses false positives
---
jasperreports/pom.xml | 15 ++-
pom.xml | 14 +++
rest-angular/pom.xml| 3 -
src/etc/project-suppression.xml | 209 ++--
4 files changed, 98 insertions(+), 143 deletions(-)
diff --git a/jasperreports/pom.xml b/jasperreports/pom.xml
index 9e782fe..2effbc6 100644
--- a/jasperreports/pom.xml
+++ b/jasperreports/pom.xml
@@ -36,6 +36,17 @@
net.sf.jasperreports
jasperreports
${jasperreports.version}
+
+
+ com.fasterxml.jackson.core
+ jackson-databind
+
+
+
+
+
+ com.fasterxml.jackson.core
+ jackson-databind
@@ -55,7 +66,7 @@
-
+
org.eclipse.jetty
jetty-maven-plugin
@@ -71,4 +82,4 @@
-
\ No newline at end of file
+
diff --git a/pom.xml b/pom.xml
index 33b60d4..3e838b8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -47,6 +47,8 @@
2.19.0
9.4.46.v20220331
true
+2.14.1
+2.14.1
@@ -152,6 +154,18 @@
log4j-api
${log4j2.version}
+
+
+com.fasterxml.jackson.core
+jackson-databind
+${jackson-data-bind.version}
+
+
+com.fasterxml.jackson.dataformat
+jackson-dataformat-xml
+${jackson.version}
+
+
diff --git a/rest-angular/pom.xml b/rest-angular/pom.xml
index 060b67f..0fba482 100644
--- a/rest-angular/pom.xml
+++ b/rest-angular/pom.xml
@@ -16,7 +16,6 @@
UTF-8
-2.13.4
@@ -85,12 +84,10 @@
com.fasterxml.jackson.core
jackson-databind
-${jackson.version}
com.fasterxml.jackson.dataformat
jackson-dataformat-xml
-${jackson.version}
diff --git a/src/etc/project-suppression.xml b/src/etc/project-suppression.xml
index 413495e..8f421d8 100644
--- a/src/etc/project-suppression.xml
+++ b/src/etc/project-suppression.xml
@@ -22,91 +22,27 @@
^pkg:maven/org\.apache\.struts/struts\-core@.*$
cpe:/a:apache:struts
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2011-5057
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2012-0391
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2012-0392
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2012-0393
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2012-0394
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2012-0838
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2013-1965
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2013-1966
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2013-2115
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2013-2134
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2013-2135
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2014-0094
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2014-0113
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2015-5169
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2016-0785
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-core@.*$
-CVE-2016-4003
-
-
-
-^pkg:maven/org\.apache\.struts/struts\-annotations@.*$
-cpe:/a:apache:struts
+CVE-2016-1182
+CVE-2016-1181
+CVE-2014-0114
+CVE-2015-0899
+CVE-2011-5057
+CVE-2012-0391
+CVE-2012-0392
+CVE-2012-0393
+CVE-2012-0394
+CVE-2012-0838
+CVE-2013-1965
+CVE-2013-1966
+CVE-2013-2115
+CVE-2013-2134
+CVE-2013-2135
+CVE-2014-0094
+CVE-2014-0113
+CVE-2015-51
