From 70bd82f212bd36fe3b9bcda902f9cb52c81a8d4b Mon Sep 17 00:00:00 2001
From: Peter Pilgrim <peter.pilgrim@gmail.com>
Date: Tue, 17 Dec 2024 11:55:09 +0000
Subject: [PATCH] DTSCCI-1347 sadly, JOSE4j cannot be resolved. See also
 https://mvnrepository.com/artifact/org.bitbucket.b_c/jose4j/0.9.6

---
 config/owasp/suppressions.xml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
index 3ae84b2a..e9947bda 100644
--- a/config/owasp/suppressions.xml
+++ b/config/owasp/suppressions.xml
@@ -17,10 +17,11 @@
   </suppress>
   <!--End of temporary suppression section -->
   <suppress until="2025-03-23">
-    <!-- <cve>CVE-2023-33202</cve>  RESOLVED -->
-    <!-- <cve>CVE-2023-33201</cve>  RESOLVED -->
-    <!-- <cve>CVE-2024-30171</cve>  RESOLVED -->
-    <!-- <cve>CVE-2024-29857</cve>  RESOLVED -->
+    <cve>CVE-2023-33202</cve>  <!-- JOSE4j 0.9.6 UNRESOLVED -->
+    <cve>CVE-2023-33201</cve>  <!-- JOSE4j 0.9.6 UNRESOLVED -->
+    <cve>CVE-2024-30172</cve>  <!-- JOSE4j 0.9.6 UNRESOLVED -->
+    <cve>CVE-2024-30171</cve>  <!-- JOSE4j 0.9.6 UNRESOLVED -->
+    <cve>CVE-2024-29857</cve>  <!-- JOSE4j 0.9.6 UNRESOLVED -->
     <!-- <cve>CVE-2024-22243</cve>  RESOLVED -->
     <!-- <cve>CVE-2023-51775</cve>  RESOLVED -->
     <!-- <cve>CVE-2022-45688</cve>  RESOLVED -->