[WFLY-18073] This CVE should not be matching against resteasy-spring,

the affected functionality has also been removed from RestEasy already.
wildfly · Mar 15, 2024 · 529d77d · 529d77d
1 parent 7d85cd5
commit 529d77d
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/sca-overrides/owasp-suppressions.xml b/sca-overrides/owasp-suppressions.xml
@@ -210,4 +210,11 @@
       <packageUrl regex="true">^pkg:maven/org\.jboss\.resteasy/resteasy\-tracing\-api@.*$</packageUrl>
       <cve>CVE-2021-20293</cve>
    </suppress>
+   <suppress until="2025-03-15">
+      <notes><![CDATA[
+      file name: resteasy-spring-3.1.2.Final.jar
+      ]]></notes>
+      <packageUrl regex="true">^pkg:maven/org\.jboss\.resteasy\.spring/resteasy\-spring@.*$</packageUrl>
+      <cve>CVE-2018-1051</cve>
+   </suppress>   
 </suppressions>