Ignore CVE-2023-4586 for more netty packages

otto-de · Oct 25, 2023 · 9a22b5f · 9a22b5f
1 parent e2fe8b6
commit 9a22b5f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
@@ -75,9 +75,9 @@
     </suppress>
     <suppress>
         <notes><![CDATA[
-   FP netty issue
+   Netty does not provide TLS Hostname validation
    ]]></notes>
-        <packageUrl regex="true">^pkg:maven/io\.netty/netty-handler@.*$</packageUrl>
+        <packageUrl regex="true">^pkg:maven/io\.netty/netty-.*@.*$</packageUrl>
         <cve>CVE-2023-4586</cve>
     </suppress>
 </suppressions>