We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 2360d3d commit 5b63db6Copy full SHA for 5b63db6
etc/dependency-check-suppression.xml
@@ -113,6 +113,16 @@
113
<vulnerabilityName>CVE-2024-20932</vulnerabilityName>
114
</suppress>
115
116
+<!-- This low priority CVE does not apply to our use of the graalvm sdk.
117
+-->
118
+<suppress>
119
+ <notes><![CDATA[
120
+ file name: graal-sdk-22.3.0.jar
121
+ ]]></notes>
122
+ <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal-sdk@.*$</packageUrl>
123
+ <vulnerabilityName>CVE-2024-21138</vulnerabilityName>
124
+</suppress>
125
+
126
<!--
127
This CVE is being disputed by the Jackson project and the community seems in agreement that this
128
CVE should be rejected. We are suppressing this for now to reduce noise in our scan and will
0 commit comments