diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml index ca6481df..0c3a358e 100644 --- a/airsonic-main/cve-suppressed.xml +++ b/airsonic-main/cve-suppressed.xml @@ -208,4 +208,9 @@ .*jackson-databind.* CVE-2019-14379 + + We do not enable default typing for jackson + .*jackson-databind.* + CVE-2019-14439 +