ExampleStudy/.trivyignore at main · darwin-eu-dev/ExampleStudy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# Library CVEs from transitive JDBC/Java deps (DatabaseConnector::downloadJdbcDrivers).
# Versions are controlled by HADES/CRAN; we do not ship or patch these JARs.
# Re-evaluate when upgrading DatabaseConnector or when HADES updates driver set.
# See: https://github.com/OHDSI/DatabaseConnector

# jackson (transitive)
CVE-2022-42003
CVE-2022-42004
CVE-2020-36518
CVE-2021-46877
CVE-2025-52999

# com.microsoft.sqlserver:mssql-jdbc
CVE-2025-59250

# commons-io
CVE-2024-47554

# io.grpc:grpc-netty-shaded
CVE-2025-55163

# org.apache.commons:commons-compress (Databricks JDBC)
CVE-2021-35515
CVE-2021-35516
CVE-2021-35517
CVE-2021-36090

# ch.qos.logback (Databricks JDBC)
CVE-2023-6378

# com.amazon.redshift:redshift-jdbc42
CVE-2024-32888

# com.databricks:databricks-jdbc
CVE-2024-49194