Add a owasp suppression until CVE fixed for latest json-smart (#131)

coherence-community · Feb 11, 2025 · 647c871 · 647c871
1 parent 614cdce
commit 647c871
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/main/config/dependency-check-suppression.xml b/src/main/config/dependency-check-suppression.xml
@@ -7,4 +7,11 @@
         <packageUrl regex="true">^pkg:maven/org\.xmlunit/xmlunit-core@.*$</packageUrl>
         <vulnerabilityName>CVE-2024-31573</vulnerabilityName>
     </suppress>
+    <suppress until="2025-04-01Z">
+        <notes><![CDATA[
+        file name: json-smart-2.5.1.jar
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/net.minidev/json-smart@.*$</packageUrl>
+        <vulnerabilityName>CVE-2024-57699</vulnerabilityName>
+    </suppress>
 </suppressions>