mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-15 16:23:37 +01:00
fixed bug allowing more then a single vulnerability to be removed
Former-commit-id: aa2e87885e7a3ddc4947a81c3c3e104630630e23
This commit is contained in:
@@ -264,8 +264,8 @@ public class SuppressionRule {
|
||||
}
|
||||
if (hasCve() || hasCwe() || hasCvssBelow()) {
|
||||
final Iterator<Vulnerability> itr = dependency.getVulnerabilities().iterator();
|
||||
boolean remove = false;
|
||||
while (!remove && itr.hasNext()) {
|
||||
while (itr.hasNext()) {
|
||||
boolean remove = false;
|
||||
final Vulnerability v = itr.next();
|
||||
for (String entry : this.cve) {
|
||||
if (entry.equalsIgnoreCase(v.getName())) {
|
||||
|
||||
Reference in New Issue
Block a user