From 78e9ccbc831bd84dd19a86713bc3b4ddcf43f0b1 Mon Sep 17 00:00:00 2001
From: Frank Hossfeld <frank.hossfeld@googlemail.com>
Date: Thu, 6 Mar 2025 16:18:00 +0100
Subject: [PATCH] update OWASP suppressions

---
 owasp/owasp-suppressions.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/owasp/owasp-suppressions.xml b/owasp/owasp-suppressions.xml
index 905bd7b7..dfbb8be9 100644
--- a/owasp/owasp-suppressions.xml
+++ b/owasp/owasp-suppressions.xml
@@ -43,6 +43,17 @@
     <cve>CVE-2024-22201</cve>
   </suppress>
   <!-- gwt-dev-dependency; should never be deployed! -->
+  <suppress>
+    <notes><![CDATA[
+    file name: apache-jsp-9.4.44.v20210927.jar
+]]></notes>
+    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/apache\-jsp@.*$</packageUrl>
+    <cve>CVE-2022-2048</cve>
+    <cve>CVE-2023-36478</cve>
+    <cve>CVE-2023-44487</cve>
+    <cve>CVE-2024-22201</cve>
+  </suppress>
+  <!-- gwt-dev-dependency; should never be deployed! -->
   <suppress>
     <notes><![CDATA[file name: commons-net-*.jar]]></notes>
     <packageUrl regex="true">^pkg:maven/commons\-net/commons\-net@.*$</packageUrl>
@@ -212,6 +223,7 @@
     <cve>CVE-2023-40167</cve>
     <cve>CVE-2023-41900</cve>
     <cve>CVE-2023-44487</cve>
+    <cve>CVE-2024-22201</cve>
   </suppress><!-- gwt-dev-dependency; should never be deployed! -->
   <suppress>
     <notes><![CDATA[file name: jetty-xml-*.jar]]></notes>