From ae4ea800be711bb47d9c514ff038be3d6dd292b3 Mon Sep 17 00:00:00 2001
From: Aaron Steinfeld <aaron@harness.io>
Date: Mon, 27 Apr 2026 08:47:17 -0400
Subject: [PATCH] chore: update suppressions

---
 dependency-check/global-suppressions.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/dependency-check/global-suppressions.xml b/dependency-check/global-suppressions.xml
index dabd6cf..40f1d19 100644
--- a/dependency-check/global-suppressions.xml
+++ b/dependency-check/global-suppressions.xml
@@ -165,4 +165,14 @@
     <packageUrl regex="true">^pkg:maven/io\.grpc/grpc-.*@.*$</packageUrl>
     <cve>CVE-2026-33186</cve>
   </suppress>
+  <suppress>
+    <notes><![CDATA[
+   CVE-2026-5795 affects Jetty JASPIAuthenticator (jetty-jaspi module).
+   Suppressing for all other Jetty modules.
+  ]]></notes>
+    <packageUrl regex="true">
+      ^pkg:maven/org\.eclipse\.jetty(\..*)?/(?!.*jaspi).*@.*$
+    </packageUrl>
+    <cve>CVE-2026-5795</cve>
+  </suppress>
 </suppressions>