updated CVE list for log4j-api and log4j-web suppression

jeremylong · Dec 21, 2021 · 229f36d · 229f36d
1 parent 22420bc
commit 229f36d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/core/src/main/resources/dependencycheck-base-suppression.xml b/core/src/main/resources/dependencycheck-base-suppression.xml
@@ -6,6 +6,8 @@
             ]]></notes>
         <packageUrl regex="true">^pkg:maven/org\.apache\.logging\.log4j/log4j\-(api|web)@.*$</packageUrl>
         <cve>CVE-2021-44228</cve>
+        <cve>CVE-2021-45046</cve>
+        <cve>CVE-2021-45105</cve>
     </suppress>
     <suppress base="true">
         <notes><![CDATA[