diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index ca6481df..0c3a358e 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -208,4 +208,9 @@
.*jackson-databind.*
CVE-2019-14379
+
+ We do not enable default typing for jackson
+ .*jackson-databind.*
+ CVE-2019-14439
+