Merge pull request #736 from dsmf/chore/owasp-false-positive-connecto…

…r-core chore(owasp):[#xxx] ignore false positive connector-core-0.6.0.jar: C…
eclipse-tractusx · Jun 27, 2024 · 3e4c65e · 3e4c65e
2 parents 0eda802 + 205588e
commit 3e4c65e
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.config/owasp-suppressions.xml b/.config/owasp-suppressions.xml
@@ -35,4 +35,11 @@
         <packageUrl regex="true">^pkg:maven/com.jayway.jsonpath/[email protected]$</packageUrl>
         <vulnerabilityName>CVE-2023-51074</vulnerabilityName>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+        Dataspace components for models and JSON ID transformer, therefore OAUTH not relevant.
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/[email protected]$</packageUrl>
+        <vulnerabilityName>CVE-2024-4536</vulnerabilityName>
+    </suppress>
 </suppressions>