Suppress CVE-2023-35116 for jackson-databind

Disputed CVE that marks all versions as vulnerable - FasterXML/jackson-databind#3972
alifahadk · Jun 27, 2023 · c59f437 · c59f437
1 parent c9cd39e
commit c59f437
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/dependency-suppression/cve-suppressed.xml b/dependency-suppression/cve-suppressed.xml
@@ -78,4 +78,11 @@
         <cve>CVE-2022-31678</cve>
         <cve>CVE-2022-31701</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+   file name: jackson-databind-*.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/com.fasterxml.jackson.core/jackson-databind@.*$</packageUrl>
+        <cve>CVE-2023-35116</cve>
+    </suppress>
 </suppressions>