suppress javax.json (#4804)

* suppress javax.json * Update suppressions.xml
openrewrite · Dec 20, 2024 · 2631a7e · 2631a7e
1 parent 91a031a
commit 2631a7e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/suppressions.xml b/suppressions.xml
@@ -39,4 +39,12 @@
         <packageUrl regex="true">^pkg:maven/org\.glassfish/javax\.json@.*$</packageUrl>
         <vulnerabilityName>CVE-2023-7272</vulnerabilityName>
     </suppress>
+    <suppress until="2025-03-20">
+        <notes><![CDATA[
+        file name: javax.json-1.1.4.jar
+        reason: Used in antlr (4.11.1) code generation only. Not on the runtime classpath
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.glassfish/javax\.json@.*$</packageUrl>
+        <vulnerabilityName>CVE-2023-7272</vulnerabilityName>
+    </suppress>
 </suppressions>