From 8c529549eee82d9ce078f42d443de642b61ef83d Mon Sep 17 00:00:00 2001
From: Varkeychan Jacob <varkey98@gmail.com>
Date: Mon, 3 Aug 2026 12:14:01 +0530
Subject: [PATCH] update suppressions for netty

---
 dependency-check/global-suppressions.xml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/dependency-check/global-suppressions.xml b/dependency-check/global-suppressions.xml
index 172963b..bd8d869 100644
--- a/dependency-check/global-suppressions.xml
+++ b/dependency-check/global-suppressions.xml
@@ -211,11 +211,14 @@
   </suppress>
   <suppress>
     <notes><![CDATA[
-   CVE-2026-42582 affects netty-codec-http3 which only exists in the Netty 4.2.x line.
-   The 4.1.x line does not include HTTP/3 support. False positive due to shared CPE.
-   Advisory: https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw
+   CVE-2026-42582 and CVE-2026-56816 affect netty-codec-http3 which only exists in the
+   Netty 4.2.x line. The 4.1.x line does not include HTTP/3 support. False positive due
+   to shared CPE.
+   Advisories: https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw
+               https://github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv
    ]]></notes>
     <packageUrl regex="true">^pkg:maven/io\.netty/(?!netty\-codec\-http3).*@.*$</packageUrl>
     <cve>CVE-2026-42582</cve>
+    <cve>CVE-2026-56816</cve>
   </suppress>
 </suppressions>