Skip to content

Commit

Permalink
Add CVE-2024-38809 suppression (#62)
Browse files Browse the repository at this point in the history
  • Loading branch information
itsmemarioss authored Aug 16, 2024
1 parent 742f904 commit 82ccc35
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions dependency-check-suppressions.xml
Original file line number Diff line number Diff line change
Expand Up @@ -76,4 +76,16 @@ the vulnerable feature is disabled by default in spring boot
<packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-core@.*$</packageUrl>
<cve>CVE-2022-45688</cve>
</suppress>

<suppress>
<notes><![CDATA[
file name: spring-web-6.1.11.jar
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
We do not support etags.
TODO it may be removed when spring web is upgraded to 6.1.12
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.springframework/spring-web@.*$</packageUrl>
<vulnerabilityName>CVE-2024-38809</vulnerabilityName>
</suppress>
</suppressions>

0 comments on commit 82ccc35

Please sign in to comment.