We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent e307cdd commit b10abb8Copy full SHA for b10abb8
dependency-check-suppressions.xml
@@ -124,8 +124,11 @@
124
<cve>CVE-2018-19362</cve>
125
</suppress>
126
<suppress>
127
- <notes>Temporarily suppress jackson-databind CVE see RDM-3796</notes>
128
- <gav regex="true">^com\.fasterxml\.jackson\.core:jackson-databind:.*$</gav>
+ <notes>jackson-databind 2.8.x will not get a fix for this CVE. We need
+ to upgrade to 2.9.x. See
129
+ https://github.com/FasterXML/jackson-modules-java8/issues/90#issuecomment-450544881
130
+ and RDM-3796</notes>
131
+ <gav regex="true">^com\.fasterxml\.jackson\.core:jackson-databind:2\.8\.11\.[3].*$</gav>
132
<cve>CVE-2018-1000873</cve>
133
134
0 commit comments