From f28959e2436f42075b4fc3c7a11ae988c1bb66be Mon Sep 17 00:00:00 2001
From: Scott Jungling <scott.jungling@gmail.com>
Date: Thu, 12 Sep 2024 09:17:52 -0700
Subject: [PATCH] chore: update suppressions 09122024091729 (#57)

re: https://github.com/moderneinc/dependency-vulnerability-reports/issues/736
---
 src/main/resources/suppressions.xml | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/src/main/resources/suppressions.xml b/src/main/resources/suppressions.xml
index 7eef26c..7b224a8 100644
--- a/src/main/resources/suppressions.xml
+++ b/src/main/resources/suppressions.xml
@@ -1,6 +1,17 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-    <suppress until="2025-09-10Z">
+    <suppress until="2024-09-25Z">
+        <notes><![CDATA[
+            file name: poi-3.16.jar
+            sev: HIGH
+            reason: via rewrite-apache for recipe
+            ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.apache\.poi/poi@.*$</packageUrl>
+        <cve>CVE-2017-12626</cve>
+        <cve>CVE-2019-12415</cve>
+        <cve>CVE-2022-26336</cve>
+    </suppress>
+    <suppress until="2024-09-25Z">
         <notes><![CDATA[
    file name: rewrite-gradle-8.35.0-SNAPSHOT.jar: gradle-core-api-6.1.1.jar
    We need to support older gradle versions to be able to migrate away from them.
@@ -111,7 +122,7 @@
         <cve>CVE-2024-38809</cve>
     </suppress>
     <suppress until="2024-09-25Z">
-            <notes><![CDATA[
+        <notes><![CDATA[
        file name: guava-31.1-jre.jar
        sev: HIGH
          reason: False positive. Not referenced
@@ -147,4 +158,4 @@
         <cve>CVE-2022-3509</cve>
         <cve>CVE-2022-3510</cve>
     </suppress>
-</suppressions>
+</suppressions>
\ No newline at end of file