supress false positives
<cve>CVE-2021-33813</cve>
<cve>CVE-2021-34428</cve>
<cve>CVE-2022-23913</cve>
+ <cve>CVE-2020-36518</cve>
+ <cve></cve>
</suppress>
<suppress><notes><![CDATA[file name: lodash.merge:4.6.1]]></notes>
<packageUrl regex="true">^pkg:npm/lodash\.merge@.*$</packageUrl>
<vulnerabilityName>1066</vulnerabilityName>
</suppress>
+ <suppress>
+ <notes><![CDATA[
+ file name: nekohtml-1.9.22.jar
+ ]]></notes>
+ <packageUrl regex="true">^pkg:maven/net\.sourceforge\.nekohtml/nekohtml@.*$</packageUrl>
+ <cpe>cpe:/a:nekohtml_project:nekohtml</cpe>
+</suppress>
</suppressions>
\ No newline at end of file
