Supress unlikely med. vuln. in compress

Signed-off-by: Gary O'Neall <[email protected]>
spdx · Sep 5, 2024 · e9ae99e · e9ae99e
1 parent b769415
commit e9ae99e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/dependency-check-supress.xml b/dependency-check-supress.xml
@@ -64,4 +64,12 @@
    <packageUrl regex="true">^pkg:maven/com\.github\.jsonld\-java/jsonld\-java@.*$</packageUrl>
    <cve>CVE-2023-5072</cve>
 </suppress>
+<suppress>
+   <notes><![CDATA[
+   file name: commons-compress-1.24.0.jar
+   Since this utility is only called by Jena - it is unlikely to be impacted
+   ]]></notes>
+   <packageUrl regex="true">^pkg:maven/org\.apache\.commons/commons\-compress@.*$</packageUrl>
+   <cve>CVE-2024-25710</cve>
+</suppress>
 </suppressions>