From 7bdcdcba3d12c52394f9898fcf35a7dae5f6aa7c Mon Sep 17 00:00:00 2001
From: Armin Schrenk <armin.schrenk@skymatic.de>
Date: Tue, 26 Nov 2024 15:49:43 +0100
Subject: [PATCH] Update suppression.xml

---
 suppression.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/suppression.xml b/suppression.xml
index f146e6054..74535d047 100644
--- a/suppression.xml
+++ b/suppression.xml
@@ -70,4 +70,13 @@
 		<packageUrl regex="true">^pkg:maven/org\.apache\.jackrabbit/jackrabbit\-webdav@.*$</packageUrl>
 		<cve>CVE-2023-37895</cve>
 	</suppress>
+	<suppress>
+   		<notes><![CDATA[
+			The project does not use the HttpURI class at all, so no decoded user data is passed to it.
+			See also https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh.
+		]]></notes>
+		<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-(http|server|io)@.*$</packageUrl>   	
+   		<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
+		<cve>CVE-2024-6763</cve>
+	</suppress>
 </suppressions>