ExternalVendorCode/corda
1
0
Fork 0
mirror of https://github.com/corda/corda.git synced 2025-02-21 09:51:57 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

NOTICK: Remaining snyk waivers updated for Corda OS 4.10

Browse Source
This commit is contained in:
Ritu 2023-01-04 12:10:48 +00:00
parent a98f17922c
commit e2ee13196d
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.snyk
View File

@ -206,7 +206,7 @@ ignore:
not yaml. So given this Corda is not susceptible to this
vulnerability.Cordapp authors should exercise their own judgment if
using this library directly in their cordapp.
expires: 2023-02-03T11:35:04.385Z
expires: 2023-03-03T11:35:04.385Z
created: 2023-01-04T11:35:04.414Z
SNYK-JAVA-IONETTY-3167773:
- '*':
@ -216,13 +216,13 @@ ignore:
but it is not used in Corda, which uses a custom binary protocol
secured by mutually authenticated TLS. The vulnerability relating to
HTTP Response splitting is not exposed.
expires: 2023-02-03T11:40:51.456Z
expires: 2023-03-03T11:40:51.456Z
created: 2023-01-04T11:40:51.467Z
SNYK-JAVA-COMH2DATABASE-3146851:
- '*':
reason: >-
Corda does not make use of the H2 web admin console, so it not
susceptible to this reported vulnerability
expires: 2023-02-03T11:45:11.295Z
expires: 2023-03-03T11:45:11.295Z
created: 2023-01-04T11:45:11.322Z
patch: {}