Update suppression.xml

This commit is contained in:
Armin Schrenk
2024-11-26 15:49:43 +01:00
committed by GitHub
parent 50cfdbbc0b
commit 7bdcdcba3d

View File

@@ -70,4 +70,13 @@
<packageUrl regex="true">^pkg:maven/org\.apache\.jackrabbit/jackrabbit\-webdav@.*$</packageUrl>
<cve>CVE-2023-37895</cve>
</suppress>
<suppress>
<notes><![CDATA[
The project does not use the HttpURI class at all, so no decoded user data is passed to it.
See also https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh.
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-(http|server|io)@.*$</packageUrl>
<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
<cve>CVE-2024-6763</cve>
</suppress>
</suppressions>