From 4202d690c22ea9b763e34a97a70767a390114841 Mon Sep 17 00:00:00 2001
From: Will Mooreston <willm@labkey.com>
Date: Wed, 17 Sep 2025 11:11:40 -0700
Subject: [PATCH]  suppress CVE-2025-41249

---
 dependencyCheckSuppression.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index 4c69d33d30..01395decbe 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -139,4 +139,13 @@
        <packageUrl regex="true">^pkg:maven/com\.google\.code\.gson/gson@.*$</packageUrl>
        <vulnerabilityName>CVE-2025-53864</vulnerabilityName>
     </suppress>
+
+    <!-- We don't use @EnableMethodSecurity, so we are not impacted by CVE-2025-41249 -->
+    <suppress>
+        <notes><![CDATA[
+   file name: spring-core-6.2.10.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.springframework/spring-core@.*$</packageUrl>
+        <vulnerabilityName>CVE-2025-41249</vulnerabilityName>
+    </suppress>
 </suppressions>