Merge pull request #3910 from jeremylong/updateFP

updated CVE list for log4j-api and log4j-web suppression
jeremylong · Dec 21, 2021 · a61200e · a61200e
2 parents 22420bc + 229f36d
commit a61200e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/core/src/main/resources/dependencycheck-base-suppression.xml b/core/src/main/resources/dependencycheck-base-suppression.xml
@@ -6,6 +6,8 @@
             ]]></notes>
         <packageUrl regex="true">^pkg:maven/org\.apache\.logging\.log4j/log4j\-(api|web)@.*$</packageUrl>
         <cve>CVE-2021-44228</cve>
+        <cve>CVE-2021-45046</cve>
+        <cve>CVE-2021-45105</cve>
     </suppress>
     <suppress base="true">
         <notes><![CDATA[