From 205bf40bbbc0d956f9e3dc834e84cc8653a7708a Mon Sep 17 00:00:00 2001
From: Udo Schnurpfeil <udo.schnurpfeil@irian.eu>
Date: Mon, 26 Aug 2024 16:10:28 +0200
Subject: [PATCH] deps: ignore the bootstrap carousel issue

---
 .../dependency-check-suppression-for-tobago-4.x.xml       | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml
index 1b029b3f..c05de7be 100644
--- a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml
+++ b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml
@@ -63,4 +63,12 @@
     <packageUrl regex="true">^pkg:maven/.*/.*@.*$</packageUrl>
     <cve>CVE-2021-37533</cve>
   </suppress>
+  <suppress>
+    <notes><![CDATA[ file name: bootstrap*.js
+There is an issue with the carousel component. Tobago doesn't use the component, but if the application
+uses the carousel component, they might be affected. We recommend to upgrade to Tobago 5 or higher.
+]]></notes>
+    <packageUrl regex="true">^pkg:javascript/bootstrap@.*$</packageUrl>
+    <vulnerabilityName>CVE-2024-6531</vulnerabilityName>
+  </suppress>
 </suppressions>