Skip to content

Commit e9ae99e

Browse files
committed
Supress unlikely med. vuln. in compress
Signed-off-by: Gary O'Neall <gary@sourceauditor.com>
1 parent b769415 commit e9ae99e

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

dependency-check-supress.xml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,4 +64,12 @@
6464
<packageUrl regex="true">^pkg:maven/com\.github\.jsonld\-java/jsonld\-java@.*$</packageUrl>
6565
<cve>CVE-2023-5072</cve>
6666
</suppress>
67+
<suppress>
68+
<notes><![CDATA[
69+
file name: commons-compress-1.24.0.jar
70+
Since this utility is only called by Jena - it is unlikely to be impacted
71+
]]></notes>
72+
<packageUrl regex="true">^pkg:maven/org\.apache\.commons/commons\-compress@.*$</packageUrl>
73+
<cve>CVE-2024-25710</cve>
74+
</suppress>
6775
</suppressions>

0 commit comments

Comments
 (0)