update OWASP suppressions

NaluKit · Mar 6, 2025 · 78e9ccb · 78e9ccb
1 parent 54cbd8d
commit 78e9ccb
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/owasp/owasp-suppressions.xml b/owasp/owasp-suppressions.xml
@@ -43,6 +43,17 @@
     <cve>CVE-2024-22201</cve>
   </suppress>
   <!-- gwt-dev-dependency; should never be deployed! -->
+  <suppress>
+    <notes><![CDATA[
+    file name: apache-jsp-9.4.44.v20210927.jar
+]]></notes>
+    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/apache\-jsp@.*$</packageUrl>
+    <cve>CVE-2022-2048</cve>
+    <cve>CVE-2023-36478</cve>
+    <cve>CVE-2023-44487</cve>
+    <cve>CVE-2024-22201</cve>
+  </suppress>
+  <!-- gwt-dev-dependency; should never be deployed! -->
   <suppress>
     <notes><![CDATA[file name: commons-net-*.jar]]></notes>
     <packageUrl regex="true">^pkg:maven/commons\-net/commons\-net@.*$</packageUrl>
@@ -212,6 +223,7 @@
     <cve>CVE-2023-40167</cve>
     <cve>CVE-2023-41900</cve>
     <cve>CVE-2023-44487</cve>
+    <cve>CVE-2024-22201</cve>
   </suppress><!-- gwt-dev-dependency; should never be deployed! -->
   <suppress>
     <notes><![CDATA[file name: jetty-xml-*.jar]]></notes>