diff --git a/.build/build-owasp.xml b/.build/build-owasp.xml index 4c00a6a989..7ab160ffb9 100644 --- a/.build/build-owasp.xml +++ b/.build/build-owasp.xml @@ -19,7 +19,7 @@ - + diff --git a/.build/owasp/dependency-check-suppressions.xml b/.build/owasp/dependency-check-suppressions.xml index f938b05f28..7e05bffecf 100644 --- a/.build/owasp/dependency-check-suppressions.xml +++ b/.build/owasp/dependency-check-suppressions.xml @@ -21,15 +21,17 @@ --> + ^pkg:maven/io\.netty/netty\-.*@.*$ - CVE-2023-44487 - - - - - ^pkg:maven/io\.netty/netty\-.*@.*$ + CVE-2025-24970 CVE-2025-25193 + CVE-2024-29025 + CVE-2023-44487 + CVE-2024-47535 + CVE-2025-55163 + CVE-2025-58056 + CVE-2025-58057 diff --git a/.snyk b/.snyk index 79150117f0..7412b1de02 100644 --- a/.snyk +++ b/.snyk @@ -3,7 +3,7 @@ version: v1.25.0 ignore: CVE-2023-44487: - - reason: https://issues.apache.org/jira/browse/CASSANDRA-18943 -- ^pkg:maven/io\.netty/netty\-.*@.*$ + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ CVE-2023-6378: - reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml CVE-2023-6481: @@ -12,7 +12,19 @@ ignore: - reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml CVE-2024-12801: - reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml + CVE-2024-29025: + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ CVE-2024-45772: - reason: https://issues.apache.org/jira/browse/CASSANDRA-20024 -- ^pkg:maven/org\.apache\.lucene/lucene\-.*@9.7.0$ + CVE-2024-47535: + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ + CVE-2025-24970: + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ CVE-2025-25193: - - reason: https://issues.apache.org/jira/browse/CASSANDRA-20504 -- ^pkg:maven/io\.netty/netty\-.*@.*$ + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ + CVE-2025-55163: + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ + CVE-2025-58056: + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ + CVE-2025-58057: + - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$