diff --git a/scripts/generateAndCheckSBOM.js b/scripts/generateAndCheckSBOM.js index 5155b1c83..3dd24348c 100755 --- a/scripts/generateAndCheckSBOM.js +++ b/scripts/generateAndCheckSBOM.js @@ -43,7 +43,8 @@ const licenseWhiteList = [ const cveWhiteList = { 'pkg:maven/org.springframework/spring-web@5.3.27' : ['CVE-2016-1000027'], // based on the issue this is not a CVE https://github.com/FasterXML/jackson-databind/issues/3972 - 'pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2' : ['CVE-2023-35116'] + 'pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2' : ['CVE-2023-35116'], + 'pkg:maven/com.vaadin/vaadin-core@23.3-SNAPSHOT' : ['CVE-2023-25499', 'CVE-2023-25500'] } const STYLE = `