diff --git a/build.gradle b/build.gradle index 494b770a8..d95d14730 100644 --- a/build.gradle +++ b/build.gradle @@ -4,7 +4,7 @@ plugins { id 'java' id 'jacoco' id 'io.spring.dependency-management' version '1.0.9.RELEASE' apply false - id 'org.owasp.dependencycheck' version '5.3.2.1' + id 'org.owasp.dependencycheck' version '6.0.2' id 'org.sonarqube' version '2.6.2' id 'org.springframework.boot' version '2.2.10.RELEASE' apply false id 'com.gorylenko.gradle-git-properties' version '1.4.21' diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml index cf57f11f5..a5785d4cb 100644 --- a/dependency-check-suppressions.xml +++ b/dependency-check-suppressions.xml @@ -362,4 +362,11 @@ CVE-2020-10518 CVE-2020-10517 + + + + ^com\.nimbusds:oauth2-oidc-sdk:.*$ + CVE-2007-1651 + CVE-2007-1652 +