diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml index ce449ee7..ca6481df 100644 --- a/airsonic-main/cve-suppressed.xml +++ b/airsonic-main/cve-suppressed.xml @@ -203,4 +203,9 @@ ^javax\.servlet:jstl:.*$ CVE-2015-0254 + + We do not enable default typing for jackson + .*jackson-databind.* + CVE-2019-14379 +