From d5d992b1c25af541b513b13c46f6b2aac13cbe38 Mon Sep 17 00:00:00 2001
From: Copilot <198982749+Copilot@users.noreply.github.com>
Date: Mon, 18 May 2026 11:23:09 +0200
Subject: [PATCH] Add dependency-check suppressions for new Jetty CVEs (#4241)

Agent-Logs-Url: https://github.com/cryptomator/cryptomator/sessions/7fec8174-cf7f-4860-9a62-1299e45a5ca6

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: infeo <9036915+infeo@users.noreply.github.com>
---
 suppression.xml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/suppression.xml b/suppression.xml
index bb1ff3f9b..8dc9fbe87 100644
--- a/suppression.xml
+++ b/suppression.xml
@@ -100,6 +100,24 @@
 		<cpe>cpe:/a:flatpak:flatpak</cpe>
 	</suppress>
 
+	<suppress>
+		<notes><![CDATA[
+		Jetty is used as a local server only.
+   ]]></notes>
+		<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-.*$</packageUrl>
+		<vulnerabilityName>CVE-2026-2332</vulnerabilityName>
+		<cve>CVE-2026-2332</cve>
+	</suppress>
+
+	<suppress>
+		<notes><![CDATA[
+		Jetty is used as a local server only.
+   ]]></notes>
+		<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-.*$</packageUrl>
+		<vulnerabilityName>CVE-2026-5795</vulnerabilityName>
+		<cve>CVE-2026-5795</cve>
+	</suppress>
+
 	<suppress>
 		<notes><![CDATA[
 		Jetty is used as a local server only.