From da21c7fa809f61292d88895d45a4a4a3b4487c0d Mon Sep 17 00:00:00 2001
From: Armin Schrenk <armin.schrenk@skymatic.de>
Date: Fri, 4 Aug 2023 17:01:19 +0200
Subject: [PATCH] suppress false positive

cherry picked from 9bd5b45ea7ef8157efbcff416fcfe18c47002de7
---
 suppression.xml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/suppression.xml b/suppression.xml
index b7e99d589..7d4e37970 100644
--- a/suppression.xml
+++ b/suppression.xml
@@ -63,4 +63,11 @@
 		<cve>CVE-2023-35116</cve>
 	</suppress>
 
-</suppressions>
\ No newline at end of file
+	<suppress>
+		<notes><![CDATA[
+		False positive for jackrabbit-webdav-2.21.15.jar. This component is not affected, see https://lists.apache.org/thread/j03b3qdhborc2jrhdc4d765d3jkh8bfw
+   ]]></notes>
+		<packageUrl regex="true">^pkg:maven/org\.apache\.jackrabbit/jackrabbit\-webdav@.*$</packageUrl>
+		<cve>CVE-2023-37895</cve>
+	</suppress>
+</suppressions>