diff --git a/pom.xml b/pom.xml index 61bae548b..b0dde763a 100644 --- a/pom.xml +++ b/pom.xml @@ -31,7 +31,7 @@ 1.0.0-beta1 1.3.1 1.3.1 - 1.2.2 + 1.2.4 16 diff --git a/suppression.xml b/suppression.xml index a5fa9d766..c747f92a7 100644 --- a/suppression.xml +++ b/suppression.xml @@ -14,40 +14,15 @@ - - org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6 - CVE-2009-5045 - - - - org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6 - CVE-2009-5046 - + - + As long as we don't suppress anything in org.eclipse.jetty:jetty-server or :jetty-servlet, + vulnerabilities will still trigger if we actually use an outdated Jetty version. + ]]> org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6 - CVE-2017-9735 - - - - org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6 - CVE-2017-7656 - - - - org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6 - CVE-2017-7657 - - - - org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6 - CVE-2017-7658 - - - - - org.eclipse.jetty.toolchain:jetty-servlet-api:4.0.6 - CVE-2020-27216 + .* \ No newline at end of file