Ignore CVE-2019-14439 too

5 years ago · 49c6e89f73
parent 8260fed1b3
commit 49c6e89f73
1 changed files with 5 additions and 0 deletions
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@ -208,4 +208,9 @@
        <gav regex="true">.*jackson-databind.*</gav>
        <cve>CVE-2019-14379</cve>
    </suppress>
+    <suppress>
+        <notes>We do not enable default typing for jackson</notes>
+        <gav regex="true">.*jackson-databind.*</gav>
+        <cve>CVE-2019-14439</cve>
+    </suppress>
 </suppressions>