From 190631b6e174a920bd6eb8da708f373f74bc532c Mon Sep 17 00:00:00 2001
From: Juho Nurminen <juho.nurminen@mattermost.com>
Date: Wed, 25 Mar 2020 10:43:25 +0200
Subject: [PATCH] Suppress CVE-2020-10675 (#14132)

Automatic Merge
---
 dependency-suppression.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/dependency-suppression.xml b/dependency-suppression.xml
index 9151f3b4c1..fc8c716a28 100644
--- a/dependency-suppression.xml
+++ b/dependency-suppression.xml
@@ -56,4 +56,11 @@
     <packageUrl regex="true">^pkg:golang/golang\.org/x/crypto@.*$</packageUrl>
     <cpe>cpe:/a:ssh:ssh</cpe>
   </suppress>
+  <suppress>
+    <notes><![CDATA[
+      DoS affecting `Delete`; no references to the operation in codebase or dependencies
+    ]]></notes>
+    <packageUrl regex="true">^pkg:golang/github\.com/buger/jsonparser@.*$</packageUrl>
+    <cve>CVE-2020-10675</cve>
+  </suppress>
 </suppressions>