We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 2360d3d commit fb7f95cCopy full SHA for fb7f95c
etc/dependency-check-suppression.xml
@@ -113,6 +113,16 @@
113
<vulnerabilityName>CVE-2024-20932</vulnerabilityName>
114
</suppress>
115
116
+<!-- This low priority CVE does not apply to our use of the graalvm sdk.
117
+-->
118
+<suppress>
119
+ <notes><![CDATA[
120
+ file name: graal-sdk-22.3.0.jar
121
+ ]]></notes>
122
+ <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal-sdk@.*$</packageUrl>
123
+ <vulnerabilityName>CVE-2024-21138</vulnerabilityName>
124
+</suppress>
125
+
126
<!--
127
This CVE is being disputed by the Jackson project and the community seems in agreement that this
128
CVE should be rejected. We are suppressing this for now to reduce noise in our scan and will
0 commit comments