We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent bb33116 commit e2daa6bCopy full SHA for e2daa6b
dependencyCheckSuppression.xml
@@ -248,4 +248,16 @@
248
<packageUrl regex="true">^pkg:maven/com\.google\.code\.gson/gson@.*$</packageUrl>
249
<vulnerabilityName>CVE-2025-53864</vulnerabilityName>
250
</suppress>
251
+
252
+ <!--
253
+ Rhino 1.7R3 is getting flagged with a potential DoS issue when toFixed() is called on very small floating point numbers.
254
+ Upgrading to a fixed version is not trivial. See https://github.com/LabKey/internal-issues/issues/724 for details.
255
+ -->
256
+ <suppress>
257
+ <notes><![CDATA[
258
+ file name: rhino-1.7R3.jar
259
+ ]]></notes>
260
+ <packageUrl regex="true">^pkg:maven/org\.mozilla/rhino@.*$</packageUrl>
261
+ <vulnerabilityName>CVE-2025-66453</vulnerabilityName>
262
+ </suppress>
263
</suppressions>
0 commit comments