suppressions.xml

<?xml version="1.0" encoding="UTF-8"?>
<suppressions
    xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.2.xsd">


    <!-- Tomcat - Only related to 'Windows Language Pack Installer" -->
    <suppress until="2022-12-31">
        <cve>CVE-2020-0822</cve>
    </suppress>

    <suppress until="2022-12-31">
        <notes><![CDATA[Ignored since we are not vulnerable]]></notes>
        <cve>CVE-2016-1000027</cve>
    </suppress>

    <!-- Tomcat - Not really used by Elide (only for tests) -->
    <suppress until="2022-12-31">
        <cve>CVE-2022-29885</cve>
    </suppress>

    <!-- There is no fix for hibernate search -->
    <suppress until="2022-12-31">
        <cve>CVE-2017-12629</cve>
    </suppress>

    <!-- CVE is not matching the correct spring version -->
    <suppress until="2022-12-31">
        <cve>CVE-2022-22978</cve>
    </suppress>

    <!-- log4j-api No New Version released -->
    <suppress until="2022-12-31">
        <cve>CVE-2022-33915</cve>
    </suppress>

    <!-- CVE is unrelated to jms-api -->
    <suppress until="2022-12-31">
        <cve>CVE-2022-31569</cve>
    </suppress>

    <!-- Upgraded to recommended graphql java.  The matching CVE doesn't appear to be working -->
    <suppress until="2022-12-31">
        <cve>CVE-2022-37734</cve>
    </suppress>


</suppressions>