mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-17 23:04:07 +01:00
fixed bug allowing more then a single vulnerability to be removed
Former-commit-id: fa4fcd9917323b3a0e676dc8f16e46bc4099c725
This commit is contained in:
@@ -264,8 +264,8 @@ public class SuppressionRule {
|
|||||||
}
|
}
|
||||||
if (hasCve() || hasCwe() || hasCvssBelow()) {
|
if (hasCve() || hasCwe() || hasCvssBelow()) {
|
||||||
final Iterator<Vulnerability> itr = dependency.getVulnerabilities().iterator();
|
final Iterator<Vulnerability> itr = dependency.getVulnerabilities().iterator();
|
||||||
boolean remove = false;
|
while (itr.hasNext()) {
|
||||||
while (!remove && itr.hasNext()) {
|
boolean remove = false;
|
||||||
final Vulnerability v = itr.next();
|
final Vulnerability v = itr.next();
|
||||||
for (String entry : this.cve) {
|
for (String entry : this.cve) {
|
||||||
if (entry.equalsIgnoreCase(v.getName())) {
|
if (entry.equalsIgnoreCase(v.getName())) {
|
||||||
|
|||||||
Reference in New Issue
Block a user