owasp-dependency-check-suppression.xml

<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
   <suppress>
      <notes><![CDATA[
      file name: mailapi-1.5.6.jar, 
      false positive reported: https://github.com/jeremylong/DependencyCheck/issues/912
      ]]></notes>
      <cpe>cpe:/a:mail_project:mail</cpe>
      <cpe>cpe:/a:sun:javamail</cpe>
      <cve>CVE-2007-6059</cve>
      <cve>CVE-2015-9097</cve>
   </suppress>

 <suppress>
	       <notes><![CDATA[
		             file name: spring-core-4.3.17.RELEASE.jar,
			           false positive for CVE-2018-1258
				         ]]></notes>
				      <gav>org.springframework:spring-core:4.3.17.RELEASE</gav>
				           <cve>CVE-2018-1258</cve>
					      </suppress>
</suppressions>