diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index 0c3a358e..466bbb11 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -213,4 +213,9 @@
.*jackson-databind.*
CVE-2019-14439
+
+ We do not enable default typing for jackson
+ .*jackson-databind.*
+ CVE-2019-12384
+