From 8abdcaaed55454206bc5e9b262456b927879789b Mon Sep 17 00:00:00 2001
From: kelvinqian00 <kelvinqian2@gmail.com>
Date: Wed, 16 Oct 2024 12:54:00 -0400
Subject: [PATCH 1/3] Add suppression for CVE-2024-6763

---
 .nvd/suppression.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.nvd/suppression.xml b/.nvd/suppression.xml
index 644414dd3..b39179a0b 100644
--- a/.nvd/suppression.xml
+++ b/.nvd/suppression.xml
@@ -18,4 +18,11 @@
         <cpe>cpe:/a:clojure:clojure</cpe>
         <cve>CVE-2017-20189</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: jetty-http-9.4.54.v20240208.jar
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty\-http@.*$</packageUrl>
+        <vulnerabilityName>CVE-2024-6763</vulnerabilityName>
+    </suppress>
 </suppressions>

From cf2ee91e15eb269772e014286fec0a69dc864eb4 Mon Sep 17 00:00:00 2001
From: kelvinqian00 <kelvinqian2@gmail.com>
Date: Wed, 16 Oct 2024 12:57:35 -0400
Subject: [PATCH 2/3] Add TODO for Jetty 12

---
 .nvd/suppression.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.nvd/suppression.xml b/.nvd/suppression.xml
index b39179a0b..feb798bf5 100644
--- a/.nvd/suppression.xml
+++ b/.nvd/suppression.xml
@@ -18,6 +18,7 @@
         <cpe>cpe:/a:clojure:clojure</cpe>
         <cve>CVE-2017-20189</cve>
     </suppress>
+    <!-- TODO: Remove suppression once we update to Jetty 12 -->
     <suppress>
         <notes><![CDATA[
         file name: jetty-http-9.4.54.v20240208.jar

From 0e47fc6c8d5f3d2906462fd39a61947d59c1e2a6 Mon Sep 17 00:00:00 2001
From: kelvinqian00 <kelvinqian2@gmail.com>
Date: Wed, 16 Oct 2024 13:12:36 -0400
Subject: [PATCH 3/3] Update Jetty deps to 9.4.56.v20240826

---
 deps.edn | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/deps.edn b/deps.edn
index c968e6f44..545acc8fa 100644
--- a/deps.edn
+++ b/deps.edn
@@ -27,10 +27,15 @@
   com.zaxxer/HikariCP                      {:mvn/version "5.0.0"
                                             :exclusions  [org.slf4j/slf4j-api]}
   ;; Pedestal and Jetty webserver deps
-  io.pedestal/pedestal.jetty               {:mvn/version "0.6.3"
-                                            :exclusions  [org.eclipse.jetty.http2/http2-server]}
-  org.eclipse.jetty.http2/http2-server     {:mvn/version "9.4.54.v20240208"}
-  org.eclipse.jetty/jetty-alpn-java-server {:mvn/version "9.4.54.v20240208"}
+  io.pedestal/pedestal.jetty               {:mvn/version "0.6.3"}
+  org.eclipse.jetty/jetty-server           {:mvn/version "9.4.56.v20240826"}
+  org.eclipse.jetty/jetty-servlet          {:mvn/version "9.4.56.v20240826"}
+  org.eclipse.jetty/jetty-alpn-server      {:mvn/version "9.4.56.v20240826"}
+  org.eclipse.jetty.http2/http2-server     {:mvn/version "9.4.56.v20240826"}
+  org.eclipse.jetty/jetty-alpn-java-server {:mvn/version "9.4.56.v20240826"}
+  org.eclipse.jetty.websocket/websocket-api     {:mvn/version "9.4.56.v20240826"}
+  org.eclipse.jetty.websocket/websocket-servlet {:mvn/version "9.4.56.v20240826"}
+  org.eclipse.jetty.websocket/websocket-server  {:mvn/version "9.4.56.v20240826"}
   ;; Security deps
   buddy/buddy-core    {:mvn/version "1.11.418"
                        :exclusions [org.bouncycastle/bcprov-jdk18on