From cd4e42de5bae86dfe44169c272ba029b388dfdb1 Mon Sep 17 00:00:00 2001
From: Greg Rushton <grushton@broadinstitute.org>
Date: Wed, 9 Aug 2023 08:46:03 -0400
Subject: [PATCH] suppress non-updatable library

---
 owaspSuppression.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/owaspSuppression.xml b/owaspSuppression.xml
index fbf9371b..032d361f 100644
--- a/owaspSuppression.xml
+++ b/owaspSuppression.xml
@@ -1,3 +1,14 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+
+  <!-- Dropwizard dependency that does not have an upgrade -->
+  <suppress>
+    <notes><![CDATA[
+   file name: jackson-databind-2.15.2.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@.*$
+    </packageUrl>
+    <cve>CVE-2023-35116</cve>
+  </suppress>
+
 </suppressions>