From 634fd272f8e41a59e98a41c23a15ed708cfddf39 Mon Sep 17 00:00:00 2001
From: Aaron Steinfeld <aaron@harness.io>
Date: Tue, 10 Mar 2026 08:55:52 -0400
Subject: [PATCH] chore: update jetty suppressions

---
 dependency-check/global-suppressions.xml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/dependency-check/global-suppressions.xml b/dependency-check/global-suppressions.xml
index 672b4da..c75923d 100644
--- a/dependency-check/global-suppressions.xml
+++ b/dependency-check/global-suppressions.xml
@@ -127,11 +127,12 @@
   </suppress>
   <suppress>
     <notes><![CDATA[
-   file name: jetty-http-11.0.20.jar
+   Jetty 11.x is EOL - official fix only available in 12.x for these CVEs
    ]]></notes>
-    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-.*@.*$</packageUrl>
+    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-.*@11\..*$</packageUrl>
     <cve>CVE-2024-8184</cve>
     <cve>CVE-2024-6763</cve>
+    <cve>CVE-2025-11143</cve>
   </suppress>
   <suppress>
     <notes><![CDATA[