Skip to content

Commit

Permalink
Push suppression date for CVE-2023-2976
Browse files Browse the repository at this point in the history
Pushing the suppression date since not much new information is
available and no upstream release has been made of the affected
library (espresso).
  • Loading branch information
albin-mullvad committed Sep 13, 2023
1 parent 0207bb3 commit 761f7be
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion android/config/dependency-check-suppression.xml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
<packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
<cve>CVE-2020-8908</cve>
</suppress>
<suppress until="2023-09-01Z">
<suppress until="2024-03-01Z">
<notes><![CDATA[
This CVE only part of the debugAndroidTestRuntimeClasspath so suppressing in automatic
checks and tracking externally.
Expand Down

0 comments on commit 761f7be

Please sign in to comment.