Merge pull request #81 from maddie480/dependabot/maven/org.json-json-…

…20231013 Bump org.json:json from 20230618 to 20231013
maddie480 · Oct 15, 2023 · fae74a0 · fae74a0
2 parents f63c36c + cc06316
commit fae74a0
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/.github/owasp-suppressions.xml b/.github/owasp-suppressions.xml
@@ -7,4 +7,11 @@
         <packageUrl regex="true">^pkg:maven/org\.json/json@.*$</packageUrl>
         <cve>CVE-2022-45688</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+            This CVE affects all versions of JSON-java up to and excluding 20230618... and the project depends on a higher version
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.json/json@.*$</packageUrl>
+       <cve>CVE-2023-5072</cve>
+    </suppress>
 </suppressions>
diff --git a/pom.xml b/pom.xml
@@ -101,7 +101,7 @@
         <dependency>
             <groupId>org.json</groupId>
             <artifactId>json</artifactId>
-            <version>20230618</version>
+            <version>20231013</version>
         </dependency>
 
         <!-- https://mvnrepository.com/artifact/org.sejda.imageio/webp-imageio -->