Ignore CVE-2019-14379

This commit is contained in:
jvoisin
2019-08-07 01:57:54 +02:00
parent b650ac70d6
commit 8260fed1b3
+5
View File
@@ -203,4 +203,9 @@
<gav regex="true">^javax\.servlet:jstl:.*$</gav>
<cve>CVE-2015-0254</cve>
</suppress>
<suppress>
<notes>We do not enable default typing for jackson</notes>
<gav regex="true">.*jackson-databind.*</gav>
<cve>CVE-2019-14379</cve>
</suppress>
</suppressions>