tvdinh

[ERROR] One or more dependencies were identified with vulnerabilities: 
[ERROR] 
[ERROR] spring-boot-2.0.0.RELEASE.jar: CVE-2018-1196, CVE-2017-8046
[ERROR] spring-core-5.0.4.RELEASE.jar: CVE-2018-1257, CVE-2018-1275, CVE-2018-1271, CVE-2018-1270, CVE-2018-1272
[ERROR] 
[ERROR] See the dependency-check report for more details.

tvdinh

<?xml version="1.0" encoding="UTF-8"?>
<suppressions
	xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
	<suppress>
		<notes><![CDATA[
      file name: spring-boot-2.0.0.RELEASE.jar
      ]]></notes>
		<gav regex="true">^org\.springframework\.boot:spring-boot:.*$</gav>
		<cpe>cpe:/a:pivotal_software:spring_boot</cpe>
	</suppress>

tvdinh

[ERROR] spring-core-5.0.4.RELEASE.jar: CVE-2018-1257, CVE-2018-1275, CVE-2018-1271, CVE-2018-1270, CVE-2018-1272
[ERROR] spring-boot-starter-2.0.0.RELEASE.jar: CVE-2018-1196, CVE-2017-8046
[ERROR] spring-tx-5.0.4.RELEASE.jar: CVE-2018-1257, CVE-2018-1275, CVE-2018-1271, CVE-2018-1270, CVE-2018-1272
[ERROR] 
[ERROR] See the dependency-check report for more details.