Skip to content

Commit c45e212

Browse files
Fishbowlerguusdk
authored andcommitted
OF-3335: Add dependency-check suppressions for Jetty vulns incorrectly associated with Jasper JSP engine
(cherry picked from commit 7c41585)
1 parent 7efa217 commit c45e212

1 file changed

Lines changed: 28 additions & 0 deletions

File tree

.dependency-check-suppressions.xml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,4 +114,32 @@
114114
<packageUrl regex="true">^pkg:maven/org\.apache\.httpcomponents/httpcore@4\..*$</packageUrl>
115115
<cve>CVE-2026-54428</cve>
116116
</suppress>
117+
<suppress>
118+
<notes><![CDATA[
119+
Suppress eclipse:jetty issues for apache-jsp - this is Apache Tomcat's Jasper JSP engine (org.mortbay.jasper), rebundled for use by Jetty, NOT the Jetty HTTP server.
120+
]]></notes>
121+
<packageUrl regex="true">^pkg:maven/org\.mortbay\.jasper/apache\-jsp@.*$</packageUrl>
122+
<cpe>cpe:/a:eclipse:jetty</cpe>
123+
</suppress>
124+
<suppress>
125+
<notes><![CDATA[
126+
Suppress jetty:jetty issues for apache-jsp - this is Apache Tomcat's Jasper JSP engine (org.mortbay.jasper), rebundled for use by Jetty, NOT the Jetty HTTP server.
127+
]]></notes>
128+
<packageUrl regex="true">^pkg:maven/org\.mortbay\.jasper/apache\-jsp@.*$</packageUrl>
129+
<cpe>cpe:/a:jetty:jetty</cpe>
130+
</suppress>
131+
<suppress>
132+
<notes><![CDATA[
133+
Suppress mortbay:jetty issues for apache-jsp - this is Apache Tomcat's Jasper JSP engine (org.mortbay.jasper), rebundled for use by Jetty, NOT the Jetty HTTP server.
134+
]]></notes>
135+
<packageUrl regex="true">^pkg:maven/org\.mortbay\.jasper/apache\-jsp@.*$</packageUrl>
136+
<cpe>cpe:/a:mortbay:jetty</cpe>
137+
</suppress>
138+
<suppress>
139+
<notes><![CDATA[
140+
Suppress mortbay_jetty:jetty issues for apache-jsp - this is Apache Tomcat's Jasper JSP engine (org.mortbay.jasper), rebundled for use by Jetty, NOT the Jetty HTTP server.
141+
]]></notes>
142+
<packageUrl regex="true">^pkg:maven/org\.mortbay\.jasper/apache\-jsp@.*$</packageUrl>
143+
<cpe>cpe:/a:mortbay_jetty:jetty</cpe>
144+
</suppress>
117145
</suppressions>

0 commit comments

Comments
 (0)