diff --git a/owasp-false-positive-warnings.xml b/owasp-false-positive-warnings.xml index cc7b1528c2cd0f1a589460b9b64526f1be3a2013..142a6cfe16d823a7d58b15e63866caeccadb8c29 100644 --- a/owasp-false-positive-warnings.xml +++ b/owasp-false-positive-warnings.xml @@ -57,4 +57,11 @@ <packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@.*$</packageUrl> <cve>CVE-2023-35116</cve> </suppress> + <suppress> + <notes><![CDATA[Only for demo and testing + file name: tomcat-embed-websocket-9.0.x.jar + ]]></notes> + <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat\.embed/tomcat\-embed\-websocket@.*$</packageUrl> + <cve>CVE-2023-41080</cve> + </suppress> </suppressions>