diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml index 0c3a358e..466bbb11 100644 --- a/airsonic-main/cve-suppressed.xml +++ b/airsonic-main/cve-suppressed.xml @@ -213,4 +213,9 @@ .*jackson-databind.* CVE-2019-14439 + + We do not enable default typing for jackson + .*jackson-databind.* + CVE-2019-12384 +