Added nvd suppression for jetty

SURFnet · Nov 11, 2024 · 2a92592 · 2a92592
1 parent a2eebb8
commit 2a92592
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.nvd-suppressions.xml b/.nvd-suppressions.xml
@@ -8,4 +8,10 @@
     <notes>We don't use zgrep</notes>
     <cve>CVE-2022-1271</cve>
   </suppress>
+  <suppress>
+    <cvssBelow>5.0</cvssBelow>
+    <cve>CVE-2024-6763</cve>
+    <!-- Related to the Jetty HttpURI class. The HttpURI class does insufficient validation on the authority segment of a URI.
+         We don't use the HttpURI class or the authority segment of an URI. -->
+  </suppress>
 </suppressions>