Skip to content

Commit fb7f95c

Browse files
authored
Add suppression for graalvm compiler (#9048)
1 parent 2360d3d commit fb7f95c

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

etc/dependency-check-suppression.xml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,6 +113,16 @@
113113
<vulnerabilityName>CVE-2024-20932</vulnerabilityName>
114114
</suppress>
115115

116+
<!-- This low priority CVE does not apply to our use of the graalvm sdk.
117+
-->
118+
<suppress>
119+
<notes><![CDATA[
120+
file name: graal-sdk-22.3.0.jar
121+
]]></notes>
122+
<packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal-sdk@.*$</packageUrl>
123+
<vulnerabilityName>CVE-2024-21138</vulnerabilityName>
124+
</suppress>
125+
116126
<!--
117127
This CVE is being disputed by the Jackson project and the community seems in agreement that this
118128
CVE should be rejected. We are suppressing this for now to reduce noise in our scan and will

0 commit comments

Comments
 (0)