From f271f061f9db984218257ff03ff3079c54a84e75 Mon Sep 17 00:00:00 2001
From: Laksh Singla <lakshsingla@gmail.com>
Date: Fri, 8 Dec 2023 18:17:25 +0530
Subject: [PATCH] first commit

---
 owasp-dependency-check-suppressions.xml | 8 ++++++++
 pom.xml                                 | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index e5cd33a5ff58..bdfe6c527d2b 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -847,4 +847,12 @@
     ]]></notes>
     <cve>CVE-2023-31582</cve>
   </suppress>
+
+  <!--
+  ~ CVE-2022-46337 applies to configurations using authentication for Derby and is not applicable to Druid. Also, Derby isn't a suggested
+  ~ metadata store for production clusters.
+  -->
+  <suppress>
+    <cve>CVE-2022-46337</cve>
+  </suppress>
 </suppressions>
diff --git a/pom.xml b/pom.xml
index 5fb1f49b2f2e..9d22ef43755c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1630,7 +1630,7 @@
                 <artifactId>dependency-check-maven</artifactId>
                 <version>7.4.4</version>
                 <configuration>
-                    <failBuildOnCVSS>7</failBuildOnCVSS>
+                    <failBuildOnCVSS>9</failBuildOnCVSS>
                     <skipProvidedScope>true</skipProvidedScope>
                     <skipSystemScope>true</skipSystemScope>  <!-- avoid error when processing jdk.tools:jdk.tools:jar:1.8:system -->
                     <!-- For node analysis info, see https://github.com/jeremylong/DependencyCheck/issues/2482#issuecomment-603755623 -->