Skip to content

Commit cbb0dfc

Browse files
committed
Merge 25.7 to 25.11
2 parents 4af1fd7 + e2daa6b commit cbb0dfc

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

dependencyCheckSuppression.xml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -182,4 +182,16 @@
182182
<packageUrl regex="true">^pkg:maven/org\.itadaki/bzip2@.*$</packageUrl>
183183
<cpe>cpe:/a:bzip2_project:bzip2</cpe>
184184
</suppress>
185+
186+
<!--
187+
Rhino 1.7R3 is getting flagged with a potential DoS issue when toFixed() is called on very small floating point numbers.
188+
Upgrading to a fixed version is not trivial. See https://github.com/LabKey/internal-issues/issues/724 for details.
189+
-->
190+
<suppress>
191+
<notes><![CDATA[
192+
file name: rhino-1.7R3.jar
193+
]]></notes>
194+
<packageUrl regex="true">^pkg:maven/org\.mozilla/rhino@.*$</packageUrl>
195+
<vulnerabilityName>CVE-2025-66453</vulnerabilityName>
196+
</suppress>
185197
</suppressions>

0 commit comments

Comments
 (0)