From 458a976a09a2122c759a4b9ca2153a7e15bc2d82 Mon Sep 17 00:00:00 2001
From: Sally MacFarlane <macfarla.github@gmail.com>
Date: Tue, 15 Nov 2022 14:41:22 +1000
Subject: [PATCH] add suppression for snakeyaml 1.33 for a new CVE

Signed-off-by: Sally MacFarlane <macfarla.github@gmail.com>
---
 cvss-suppressions.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/cvss-suppressions.xml b/cvss-suppressions.xml
index d4a4113bd..b0108a12a 100644
--- a/cvss-suppressions.xml
+++ b/cvss-suppressions.xml
@@ -28,6 +28,13 @@
     <suppress>
         <notes><![CDATA[
    file name: snakeyaml-1.33.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org.yaml/snakeyaml@1.33</packageUrl>
+        <cve>CVE-2022-41854</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+   file name: snakeyaml-1.33.jar
    ]]></notes>
         <packageUrl regex="true">^pkg:maven/org.yaml/snakeyaml@1.33</packageUrl>
         <cve>CVE-2022-38752</cve>