diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index ce449ee7..ca6481df 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -203,4 +203,9 @@
^javax\.servlet:jstl:.*$
CVE-2015-0254
+
+ We do not enable default typing for jackson
+ .*jackson-databind.*
+ CVE-2019-14379
+