Add graalvm suppression

helidon-io · Jan 24, 2025 · 7f09370 · 7f09370
1 parent fa6ca87
commit 7f09370
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/etc/dependency-check-suppression.xml b/etc/dependency-check-suppression.xml
@@ -142,6 +142,13 @@ https://github.com/jeremylong/DependencyCheck/issues/7019
    <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal\-sdk@.*$</packageUrl>
    <vulnerabilityName>CVE-2024-20932</vulnerabilityName>
 </suppress>
+<suppress>
+   <notes><![CDATA[
+   file name: graal-sdk-22.3.0.jar
+   ]]></notes>
+   <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal-sdk@.*$</packageUrl>
+   <vulnerabilityName>CVE-2025-21502</vulnerabilityName>
+</suppress>
 
 <!-- This low priority CVE does not apply to our use of the graalvm sdk.
 -->