Suppress CVE (apache#16538)

Suppress CVE-2024-36114
jakubmatyszewski · Aug 20, 2024 · 7e6dabb · 7e6dabb
1 parent d2761e1
commit 7e6dabb
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
@@ -692,4 +692,9 @@
     <cve>CVE-2023-50386</cve>
     <cve>CVE-2023-50292</cve>
   </suppress>
+  <suppress>
+    <!-- Used by orc-extensions as a transitive dependency.
+     TODO: There is no workaround, and the dependency cannot be upgraded till https://github.com/apache/orc has a new release. -->
+    <cve>CVE-2024-36114</cve>
+  </suppress>
 </suppressions>