Suppress 2 CVEs that appear to be false positives: CVE-2024-29131 & C…

…VE-2024-29133
mickeyz07 · May 31, 2024 · cb3839f · cb3839f
1 parent 036b83a
commit cb3839f
Showing 1 changed file with 16 additions and 1 deletion.
diff --git a/suppressions.xml b/suppressions.xml
@@ -45,5 +45,20 @@
         ]]></notes>
         <cve>CVE-2017-10355</cve>
     </suppress>
-
+    <suppress>
+        <notes><![CDATA[
+            FP per Depencency Check GitHub Issue #6704
+            pkg:maven/commons-configuration/[email protected]
+        ]]></notes>
+        <sha1>2b36e4adfb66d966c5aef2d73deb6be716389dc9</sha1>
+        <vulnerabilityName>CVE-2024-29131</vulnerabilityName>
+   </suppress>
+    <suppress>
+        <notes><![CDATA[
+            FP per Depencency Check GitHub Issue #6704
+            pkg:maven/commons-configuration/[email protected]
+        ]]></notes>
+        <sha1>2b36e4adfb66d966c5aef2d73deb6be716389dc9</sha1>
+        <vulnerabilityName>CVE-2024-29133</vulnerabilityName>
+   </suppress>
 </suppressions>