This commit is contained in:
Armin Schrenk
2025-12-30 12:31:45 +01:00
parent ceed70c314
commit 8105dbc236
2 changed files with 13 additions and 4 deletions
+11 -2
View File
@@ -82,13 +82,22 @@
<!-- Vulnerable, but unused class in jetty -->
<suppress>
<notes><![CDATA[
<notes><![CDATA[
The project does not use the HttpURI class at all, so no decoded user data is passed to it.
See also https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh.
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-.*$</packageUrl>
<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
<cve>CVE-2024-6763</cve>
</suppress>
<!-- False positives of the flatpak sandbox -->
<suppress>
<notes><![CDATA[
file name: flatpak-update-portal-1.1.0.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.purejava/flatpak-update-portal@.*$</packageUrl>
<cpe>cpe:/a:flatpak:flatpak</cpe>
</suppress>
</suppressions>