[fix][sec] Suppress false positive CVE-2023-35116 in jackson-databind (…

…#20603)
apache · Jun 20, 2023 · 505b449 · 505b449
1 parent 62a99ed
commit 505b449
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/src/owasp-dependency-check-suppressions.xml b/src/owasp-dependency-check-suppressions.xml
@@ -433,5 +433,11 @@
        ]]></notes>
         <cve>CVE-2020-8908</cve>
     </suppress>
-
+    <suppress>
+        <notes><![CDATA[
+       This is a false positive in jackson-databind.
+       See https://github.com/FasterXML/jackson-databind/issues/3972#issuecomment-1596604021
+       ]]></notes>
+        <cve>CVE-2023-35116</cve>
+    </suppress>
 </suppressions>