AE-1893: Suppress opensaml vulnerability, it was for opensaml c++ imp…

…lementation
solita · Jun 29, 2023 · e0ec40a · e0ec40a
1 parent d278e31
commit e0ec40a
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/etp-backend/nvd_suppressions.xml b/etp-backend/nvd_suppressions.xml
@@ -59,4 +59,13 @@
  <packageUrl regex="true">^pkg:maven/commons\-discovery/commons\-discovery@.*$</packageUrl>
  <cve>CVE-2022-0869</cve>
  </suppress>
+
+<!-- OpenSAML C++, not Java -->
+ <suppress>
+ <notes><![CDATA[
+ file name: opensaml-2.5.1-1.jar
+ ]]></notes>
+ <packageUrl regex="true">^pkg:maven/org\.opensaml/opensaml@.*$</packageUrl>
+ <cve>CVE-2017-16853</cve>
+ </suppress>
 </suppressions>