suppress non-updatable library

DataBiosphere · Aug 9, 2023 · cd4e42d · cd4e42d
1 parent fb95d65
commit cd4e42d
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/owaspSuppression.xml b/owaspSuppression.xml
@@ -1,3 +1,14 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+
+  <!-- Dropwizard dependency that does not have an upgrade -->
+  <suppress>
+    <notes><![CDATA[
+   file name: jackson-databind-2.15.2.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@.*$
+    </packageUrl>
+    <cve>CVE-2023-35116</cve>
+  </suppress>
+
 </suppressions>