We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 146115c commit 0b930d6Copy full SHA for 0b930d6
1 file changed
.ort.yml
@@ -54,6 +54,12 @@ resolutions:
54
reason: "SCANNER_ISSUE"
55
comment: >-
56
This file contains test data. Contained licenses do not apply to the OSS Review Toolkit.
57
+ vulnerabilities:
58
+ - id: "CVE-2024-6763"
59
+ reason: "INEFFECTIVE_VULNERABILITY"
60
+ comment: >-
61
+ The vulnerable package 'Maven:org.eclipse.jetty:jetty-http:11.0.26' is introduced as a transitive dependency of 'Maven:org.wiremock:wiremock:3.13.2'
62
+ which is a package exclusively used for testing and thus is neither distributed nor exploitable in a deployment.
63
curations:
64
license_findings:
65
- path: "README.md"
0 commit comments