Skip to content

Commit e6b6219

Browse files
authored
Merge pull request wildfly#19310 from darranl/WFLY-21079/main
[WFLY-21079] Suppress CVE-2024-52979 as about server side not the client library.
2 parents 407c220 + 737c9ee commit e6b6219

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

sca-overrides/owasp-suppressions.xml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -273,4 +273,13 @@
273273
<packageUrl regex="true">^pkg:maven/org\.eclipse\.jgit/org\.eclipse\.jgit.*@6\.10\.1.*$</packageUrl>
274274
<cve>CVE-2025-4949</cve>
275275
</suppress>
276+
<suppress>
277+
<notes><![CDATA[
278+
file name: elasticsearch-rest-client-8.15.4.jar
279+
280+
[WFLY-21079] This CVE is about the server side of the connection, not the client library we depend on.
281+
]]></notes>
282+
<packageUrl regex="true">^pkg:maven/org\.elasticsearch\.client/elasticsearch-rest-client.*@.*$</packageUrl>
283+
<cve>CVE-2024-52979</cve>
284+
</suppress>
276285
</suppressions>

0 commit comments

Comments
 (0)