From 1f46150c0bee288fb0cdb51457cab420ec43bf81 Mon Sep 17 00:00:00 2001
From: Gunnar Hillert <gunnar.hillert@oracle.com>
Date: Mon, 26 Jun 2023 12:59:32 -1000
Subject: [PATCH] gh-151 Suppress invalid CVE report for Jackson Databind

---
 pom.xml                                          | 2 +-
 src/main/config/dependency-check-suppression.xml | 7 ++++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 64aed0de9f0..e2f4c8a8433 100644
--- a/pom.xml
+++ b/pom.xml
@@ -117,7 +117,7 @@
 		<flatten-maven-plugin.version>1.2.7</flatten-maven-plugin.version>
 		<github.site-maven-plugin.version>0.12</github.site-maven-plugin.version>
 		<maven-compiler-plugin.version>3.8.1</maven-compiler-plugin.version>
-		<dependency-check-maven.version>8.2.1</dependency-check-maven.version>
+		<dependency-check-maven.version>8.3.1</dependency-check-maven.version>
 		<maven-checkstyle-plugin.version>3.1.2</maven-checkstyle-plugin.version>
 		<maven-compiler-plugin.version>3.8.1</maven-compiler-plugin.version>
 		<maven-deploy-plugin.version>2.8.2</maven-deploy-plugin.version>
diff --git a/src/main/config/dependency-check-suppression.xml b/src/main/config/dependency-check-suppression.xml
index e6ac87e3b3b..720ca2841c0 100644
--- a/src/main/config/dependency-check-suppression.xml
+++ b/src/main/config/dependency-check-suppression.xml
@@ -7,7 +7,6 @@
 -->
 
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-
     <suppress>
         <notes><![CDATA[
        file name: snakeyaml-1.33.jar
@@ -17,4 +16,10 @@
        ]]></notes>
         <cve>CVE-2022-1471</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[ jackson-databind-2.15.2.jar
+        Invalid - see: https://github.com/FasterXML/jackson-databind/issues/3997
+       ]]></notes>
+        <cve>CVE-2023-35116</cve>
+    </suppress>
 </suppressions>