Skip to content

Commit 8c52954

Browse files
committed
update suppressions for netty
1 parent 5af9ba1 commit 8c52954

1 file changed

Lines changed: 6 additions & 3 deletions

File tree

dependency-check/global-suppressions.xml

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -211,11 +211,14 @@
211211
</suppress>
212212
<suppress>
213213
<notes><![CDATA[
214-
CVE-2026-42582 affects netty-codec-http3 which only exists in the Netty 4.2.x line.
215-
The 4.1.x line does not include HTTP/3 support. False positive due to shared CPE.
216-
Advisory: https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw
214+
CVE-2026-42582 and CVE-2026-56816 affect netty-codec-http3 which only exists in the
215+
Netty 4.2.x line. The 4.1.x line does not include HTTP/3 support. False positive due
216+
to shared CPE.
217+
Advisories: https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw
218+
https://github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv
217219
]]></notes>
218220
<packageUrl regex="true">^pkg:maven/io\.netty/(?!netty\-codec\-http3).*@.*$</packageUrl>
219221
<cve>CVE-2026-42582</cve>
222+
<cve>CVE-2026-56816</cve>
220223
</suppress>
221224
</suppressions>

0 commit comments

Comments
 (0)