suppress kafka cve for ranger extension (apache#17531) (apache#17532)

clintropolis · Dec 3, 2024 · 1a162cd · 1a162cd
1 parent eccb6bd
commit 1a162cd
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
@@ -182,13 +182,15 @@
   </suppress>
 
 
+  <!-- apache ranger extension kafka dependency -->
   <suppress>
     <notes><![CDATA[
-    file name: kafka-clients-3.2.0.jar
+    file name: kafka-clients-2.8.1.jar
     ]]></notes>
     <packageUrl regex="true">^pkg:maven/org\.apache\.kafka/kafka\-clients@.*$</packageUrl>
     <cve>CVE-2022-34917</cve>
     <cve>CVE-2023-25194</cve>
+    <cve>CVE-2024-31141</cve>
   </suppress>
 
   <suppress>