owasp-check-suppressions.xml

<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
    <suppress>
        <notes><![CDATA[
      False positive. The hazelcast:hazelcast component vulnerabilities are related to Hazelcast IMDG version and not the integration - hazelcast-gcp.
      ]]></notes>
        <packageUrl regex="true">^pkg:maven/com\.hazelcast/hazelcast-gcp@.*$</packageUrl>
        <cpe>cpe:/a:hazelcast:hazelcast</cpe>
    </suppress>
    <suppress>
        <notes><![CDATA[
      False positive. The hazelcast:hazelcast component vulnerabilities are related to Hazelcast IMDG version and not the integration - hazelcast-azure.
      ]]></notes>
        <packageUrl regex="true">^pkg:maven/com\.hazelcast/hazelcast-azure@.*$</packageUrl>
        <cpe>cpe:/a:hazelcast:hazelcast</cpe>
    </suppress>
    <suppress>
        <notes><![CDATA[
      False positive. The hazelcast:hazelcast component vulnerabilities are related to Hazelcast IMDG version and not the integration - hazelcast-hibernate.
      ]]></notes>
        <packageUrl regex="true">^pkg:maven/com\.hazelcast/hazelcast-hibernate.*$</packageUrl>
        <cpe>cpe:/a:hazelcast:hazelcast</cpe>
    </suppress>
    <suppress>
        <notes><![CDATA[
      False positive. The hazelcast:hazelcast component vulnerabilities are related to Hazelcast IMDG version and not the integration - hazelcast-wm.
      ]]></notes>
        <packageUrl regex="true">^pkg:maven/com\.hazelcast/hazelcast-wm@.*$</packageUrl>
        <cpe>cpe:/a:hazelcast:hazelcast</cpe>
    </suppress>
    <suppress>
       <notes><![CDATA[
      False positive. The Avatica version is not related to the Calcite version.
       ]]></notes>
       <packageUrl regex="true">^pkg:maven/org\.apache\.calcite\.avatica/avatica\-core@.*$</packageUrl>
       <cpe>cpe:/a:apache:calcite</cpe>
    </suppress>
</suppressions>