Merge pull request #397 from hmcts/netty-suppress

Suppress netty CVE with no fix
hmcts · Oct 24, 2023 · ac871d6 · ac871d6
2 parents e60f5a5 + 8cc0e1c
commit ac871d6
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -9,4 +9,11 @@
     <cve>CVE-2022-45688</cve>
     <cve>CVE-2023-5072</cve>
   </suppress>
+
+  <!-- No fix till netty 5 release or fix applied to netty 4 -->
+  <suppress base="true">
+    <gav regex="true">^.*netty.*$</gav>
+    <cve>CVE-2023-4586</cve>
+  </suppress>
+
 </suppressions>