suppress npm-1066
<?xml version="1.0" encoding="UTF-8"?>
-<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+<suppressions
+ xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[This suppresses any jar.]]></notes>
<filePath regex="true">.*\b\.*</filePath>
<cve>CVE-2016-5425</cve>
<cve>CVE-2019-10072</cve>
</suppress>
+ <suppress><notes><![CDATA[file name: lodash.merge:4.6.1]]></notes>
+ <packageUrl regex="true">^pkg:npm/lodash\.merge@.*$</packageUrl>
+ <vulnerabilityName>1066</vulnerabilityName>
+ </suppress>
</suppressions>
\ No newline at end of file
