Update suppression.xml

This commit is contained in:
Armin Schrenk
2024-12-02 09:40:40 +01:00
committed by GitHub
parent dcc27efe5c
commit de766c2653
+12
View File
@@ -79,4 +79,16 @@
<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
<cve>CVE-2024-6763</cve>
</suppress>
<!-- Vulnerable, but unused class in jetty -->
<suppress>
<notes><![CDATA[
The project does not use the HttpURI class at all, so no decoded user data is passed to it.
See also https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh.
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-.*$</packageUrl>
<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
<cve>CVE-2024-6763</cve>
</suppress>
</suppressions>