Skip to content

Commit 5b63db6

Browse files
committedJul 29, 2024
Add suppression for graalvm compiler
1 parent 2360d3d commit 5b63db6

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed
 

‎etc/dependency-check-suppression.xml

+10
Original file line numberDiff line numberDiff line change
@@ -113,6 +113,16 @@
113113
<vulnerabilityName>CVE-2024-20932</vulnerabilityName>
114114
</suppress>
115115

116+
<!-- This low priority CVE does not apply to our use of the graalvm sdk.
117+
-->
118+
<suppress>
119+
<notes><![CDATA[
120+
file name: graal-sdk-22.3.0.jar
121+
]]></notes>
122+
<packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal-sdk@.*$</packageUrl>
123+
<vulnerabilityName>CVE-2024-21138</vulnerabilityName>
124+
</suppress>
125+
116126
<!--
117127
This CVE is being disputed by the Jackson project and the community seems in agreement that this
118128
CVE should be rejected. We are suppressing this for now to reduce noise in our scan and will

0 commit comments

Comments
 (0)
Please sign in to comment.