suppress vuln in ht (#72)

hypertrace · Dec 22, 2024 · 8364145 · 8364145
1 parent 1ccb19a
commit 8364145
Showing 1 changed file with 14 additions and 5 deletions.
diff --git a/dependency-check/global-suppressions.xml b/dependency-check/global-suppressions.xml
@@ -125,10 +125,19 @@
     <packageUrl regex="true">^pkg:maven/com\.graphql\-java/graphql\-java@19\.11$</packageUrl>
     <vulnerabilityName>CVE-2024-40094</vulnerabilityName>
   </suppress>
-  <suppress until="2025-01-31Z">
-    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\[email protected]$
-    </packageUrl>
-    <vulnerabilityName>CVE-2024-6763</vulnerabilityName>
-    <vulnerabilityName>CVE-2024-8184</vulnerabilityName>
+  <suppress>
+    <notes><![CDATA[
+   file name: jetty-http-11.0.20.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-.*@.*$</packageUrl>
+    <cve>CVE-2024-8184</cve>
+    <cve>CVE-2024-6763</cve>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[
+   file name: logback-core-1.2.13.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback-core@.*$</packageUrl>
+    <vulnerabilityName>CVE-2024-12798</vulnerabilityName>
   </suppress>
 </suppressions>