We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent cb8fd1a commit ae4ea80Copy full SHA for ae4ea80
1 file changed
dependency-check/global-suppressions.xml
@@ -165,4 +165,14 @@
165
<packageUrl regex="true">^pkg:maven/io\.grpc/grpc-.*@.*$</packageUrl>
166
<cve>CVE-2026-33186</cve>
167
</suppress>
168
+ <suppress>
169
+ <notes><![CDATA[
170
+ CVE-2026-5795 affects Jetty JASPIAuthenticator (jetty-jaspi module).
171
+ Suppressing for all other Jetty modules.
172
+ ]]></notes>
173
+ <packageUrl regex="true">
174
+ ^pkg:maven/org\.eclipse\.jetty(\..*)?/(?!.*jaspi).*@.*$
175
+ </packageUrl>
176
+ <cve>CVE-2026-5795</cve>
177
+ </suppress>
178
</suppressions>
0 commit comments