[HWORKS-1296] Suppress aircompressor 3rd party dependency vulnerabili…

…ty check. Read reasoning in JIRA
logicalclocks · Jun 10, 2024 · 983faa9 · 983faa9
1 parent 7b8f887
commit 983faa9
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/project-suppression.xml b/project-suppression.xml
@@ -236,4 +236,11 @@
     <packageUrl regex="true">^pkg:maven/org\.apache\.commons/commons\-compress@.*$</packageUrl>
     <vulnerabilityName>CVE-2024-25710</vulnerabilityName>
   </suppress>
+  <suppress>
+    <notes><![CDATA[
+   file name: aircompressor-0.10.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/io\.airlift/aircompressor@.*$</packageUrl>
+    <vulnerabilityName>CVE-2024-36114</vulnerabilityName>
+  </suppress>
 </suppressions>