RDCC-6118: Adding suppression for CVE-2021-4277 (#640)

hmcts · Jan 6, 2023 · b31455b · b31455b
1 parent b9ee465
commit b31455b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -45,4 +45,8 @@
     <packageUrl regex="true">^pkg:maven/io\.netty/netty-.+@.*$</packageUrl>
     <cve>CVE-2022-41881</cve>
 </suppress>
+  <suppress until="2023-12-30">
+    <notes>cucumber:datatable pom contains com.googlecode.java-diff-utils:diffutils which has the CVE vulnerability, no fix has been released yet for this</notes>
+    <cve>CVE-2021-4277</cve>
+  </suppress>
 </suppressions>