Skip to content

Commit 0b930d6

Browse files
committed
chore(.ort.yml): Add a vuönerability resolution for CVE-2024-6763
Signed-off-by: Sebastian Schuberth <sebastian@doubleopen.org>
1 parent 146115c commit 0b930d6

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

.ort.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,12 @@ resolutions:
5454
reason: "SCANNER_ISSUE"
5555
comment: >-
5656
This file contains test data. Contained licenses do not apply to the OSS Review Toolkit.
57+
vulnerabilities:
58+
- id: "CVE-2024-6763"
59+
reason: "INEFFECTIVE_VULNERABILITY"
60+
comment: >-
61+
The vulnerable package 'Maven:org.eclipse.jetty:jetty-http:11.0.26' is introduced as a transitive dependency of 'Maven:org.wiremock:wiremock:3.13.2'
62+
which is a package exclusively used for testing and thus is neither distributed nor exploitable in a deployment.
5763
curations:
5864
license_findings:
5965
- path: "README.md"

0 commit comments

Comments
 (0)