Merge pull request #458 from espressif/fix/zlib_exclude_cve

fix(zlib): exclude CVE-2023-45853 from scan (fixed in 1.3.1)
espressif · Dec 19, 2024 · 57c8917 · 57c8917
2 parents 81988ee + a1fa480
commit 57c8917
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/zlib/sbom_zlib.yml b/zlib/sbom_zlib.yml
@@ -5,3 +5,6 @@ supplier: 'Organization: zlib <http://www.zlib.net/>'
 description: A massively spiffy yet delicately unobtrusive compression library
 url: https://github.com/madler/zlib
 hash: 51b7f2abdade71cd9bb0e7a373ef2610ec6f9daf
+cve-exclude-list:
+  - cve: CVE-2023-45853
+    reason: Resolved in version 1.3.1