We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 4af1fd7 + e2daa6b commit cbb0dfcCopy full SHA for cbb0dfc
dependencyCheckSuppression.xml
@@ -182,4 +182,16 @@
182
<packageUrl regex="true">^pkg:maven/org\.itadaki/bzip2@.*$</packageUrl>
183
<cpe>cpe:/a:bzip2_project:bzip2</cpe>
184
</suppress>
185
+
186
+ <!--
187
+ Rhino 1.7R3 is getting flagged with a potential DoS issue when toFixed() is called on very small floating point numbers.
188
+ Upgrading to a fixed version is not trivial. See https://github.com/LabKey/internal-issues/issues/724 for details.
189
+ -->
190
+ <suppress>
191
+ <notes><![CDATA[
192
+ file name: rhino-1.7R3.jar
193
+ ]]></notes>
194
+ <packageUrl regex="true">^pkg:maven/org\.mozilla/rhino@.*$</packageUrl>
195
+ <vulnerabilityName>CVE-2025-66453</vulnerabilityName>
196
+ </suppress>
197
</suppressions>
0 commit comments