Browse Source

Update suppression.xml

Armin Schrenk 4 months ago
parent
commit
de766c2653
1 changed files with 12 additions and 0 deletions
  1. 12 0
      suppression.xml

+ 12 - 0
suppression.xml

@@ -79,4 +79,16 @@
    		<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
 		<cve>CVE-2024-6763</cve>
 	</suppress>
+
+	<!-- Vulnerable, but unused class in jetty -->
+	<suppress>
+   		<notes><![CDATA[
+			The project does not use the HttpURI class at all, so no decoded user data is passed to it.
+			See also https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh.
+		]]></notes>
+		<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-.*$</packageUrl>   	
+   		<vulnerabilityName>CVE-2024-6763</vulnerabilityName>
+		<cve>CVE-2024-6763</cve>
+	</suppress>
+	
 </suppressions>