This repository was archived by the owner on Apr 22, 2025. It is now read-only.
File tree Expand file tree Collapse file tree 2 files changed +16
-2
lines changed Expand file tree Collapse file tree 2 files changed +16
-2
lines changed Original file line number Diff line number Diff line change 1
1
<?xml version =" 1.0" encoding =" UTF-8" ?>
2
2
<suppressions xmlns =" https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd" >
3
+ <suppress >
4
+ <notes ><![CDATA[
5
+ Vulnerability in C++ gRPC implementation
6
+ ]]> </notes >
7
+ <packageUrl regex =" true" >^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$</packageUrl >
8
+ <cve >CVE-2023-33953</cve >
9
+ </suppress >
10
+ <suppress >
11
+ <notes ><![CDATA[
12
+ Vulnerability in C++ gRPC implementation
13
+ ]]> </notes >
14
+ <packageUrl regex =" true" >^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$</packageUrl >
15
+ <cve >CVE-2023-32732</cve >
16
+ </suppress >
3
17
</suppressions >
Original file line number Diff line number Diff line change 28
28
<url >http://github.com/hyperledger/fabric-sdk-java</url >
29
29
</scm >
30
30
<properties >
31
- <grpc .version>1.57.1 </grpc .version>
31
+ <grpc .version>1.57.2 </grpc .version>
32
32
<protobuf .version>3.22.5</protobuf .version> <!-- Must match version used by grpc-protobuf -->
33
33
<bouncycastle .version>1.76</bouncycastle .version>
34
34
<httpclient .version>4.5.14</httpclient .version>
222
222
<dependency >
223
223
<groupId >io.opentelemetry.instrumentation</groupId >
224
224
<artifactId >opentelemetry-grpc-1.6</artifactId >
225
- <version >1.28 .0-alpha</version >
225
+ <version >1.29 .0-alpha</version >
226
226
</dependency >
227
227
<dependency >
228
228
<groupId >io.opentelemetry.proto</groupId >
You can’t perform that action at this time.
0 commit comments