Skip to content

Commit 95861d0

Browse files
chore: update jetty suppressions (#88)
1 parent a3deff8 commit 95861d0

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

dependency-check/global-suppressions.xml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -127,11 +127,12 @@
127127
</suppress>
128128
<suppress>
129129
<notes><![CDATA[
130-
file name: jetty-http-11.0.20.jar
130+
Jetty 11.x is EOL - official fix only available in 12.x for these CVEs
131131
]]></notes>
132-
<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-.*@.*$</packageUrl>
132+
<packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-.*@11\..*$</packageUrl>
133133
<cve>CVE-2024-8184</cve>
134134
<cve>CVE-2024-6763</cve>
135+
<cve>CVE-2025-11143</cve>
135136
</suppress>
136137
<suppress>
137138
<notes><![CDATA[

0 commit comments

Comments
 (0)