cassandra/.snyk at trunk · belliottsmith/cassandra · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
# Snyk (https://snyk.io) policy file, provides ignores for known false positives.
# This file is autogenerated from .build/dependency-check-suppressions.xml
version: v1.25.0
ignore:
  CVE-2023-44487:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-18943 -- ^pkg:maven/io\.netty/netty\-.*@.*$
  CVE-2023-6378:
    - reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
  CVE-2023-6481:
    - reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
  CVE-2024-12798:
    - reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
  CVE-2024-12801:
    - reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
  CVE-2024-29025:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
  CVE-2024-45772:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20024 -- ^pkg:maven/org\.apache\.lucene/lucene\-.*@9.7.0$
  CVE-2024-47535:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
  CVE-2025-24970:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
  CVE-2025-25193:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20504 -- ^pkg:maven/io\.netty/netty\-.*@.*$
  CVE-2025-55163:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
  CVE-2025-58056:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
  CVE-2025-58057:
    - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$