build: false positive - is fixed in 2.0.25
diff --git a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml
index 5cecbc7..4ff0b8a 100644
--- a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml
+++ b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-4.x.xml
@@ -47,4 +47,10 @@
     <gav regex="true">^org\.apache\.myfaces\.tobago:tobago-tool-test:.*$</gav>
     <cve>CVE-2007-1349</cve>
   </suppress>
+  <suppress>
+    <!-- the problem is fixed in 2.0.25 - https://issues.apache.org/jira/browse/MYFACES-4373 -->
+    <notes><![CDATA[ file name: myfaces-impl-2.0.25.jar ]]></notes>
+    <sha1>cef072c00fce9358be1fb26ded20ec5e38321316</sha1>
+    <vulnerabilityName>CVE-2021-26296</vulnerabilityName>
+  </suppress>
 </suppressions>