Skip to content

Commit f3db193

Browse files
authored
Chore: [AEA-0000] - Add suppression for CVE-2025-9230 (#1604)
## Summary - Routine Change ### Details This pull request adds suppression for CVE-2025-9230, as it is not applicable. We do not use password-based encryption in CMS messages.
1 parent 10a6899 commit f3db193

1 file changed

Lines changed: 4 additions & 1 deletion

File tree

packages/cdk/resources/InspectorFilters.ts

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,10 @@ export class InspectorFilters extends Construct {
4242
"CVE-2025-52520", // https://nvd.nist.gov/vuln/detail/cve-2025-52520
4343
"CVE-2025-48989", // https://nvd.nist.gov/vuln/detail/cve-2025-48989
4444
"CVE-2025-53506", // https://nvd.nist.gov/vuln/detail/cve-2025-53506
45-
"CVE-2025-57319" // https://nvd.nist.gov/vuln/detail/cve-2025-57319 - this is a false positive and is not an issue
45+
"CVE-2025-57319", // https://nvd.nist.gov/vuln/detail/cve-2025-57319
46+
// this is a false positive and is not an issue
47+
"CVE-2025-9230" // https://nvd.nist.gov/vuln/detail/CVE-2025-9230
48+
// not applicable, we do not use password-based encryption in CMS messages
4649
]
4750

4851
for (const cve of cvesToSuppress){

0 commit comments

Comments
 (0)