Ignore CVE-2019-12814 (Jackson 2.9.9) until a fix is available (#2816)

dropwizard · Jun 26, 2019 · 6fd3259 · 6fd3259
1 parent 6bc2b2c
commit 6fd3259
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/suppressed-cves.xml b/suppressed-cves.xml
@@ -49,4 +49,8 @@
         <cve>CVE-2019-11358</cve>
         <cve>CVE-2019-8331</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[Ignore CVE-2019-12814 until Jackson 2.9.9.1 or 2.9.10 has been released]]></notes>
+        <cve>CVE-2019-12814</cve>
+    </suppress>
 </suppressions>