False positive CVE-2023-35116 (#399)

zalando-nakadi · Jun 19, 2023 · 53b5209 · 53b5209
1 parent 56d2de7
commit 53b5209
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/cve-suppressions.xml b/cve-suppressions.xml
@@ -31,4 +31,11 @@
    ]]></notes>
    <cve>CVE-2022-45688</cve>
 </suppress>
+<suppress>
+   <notes><![CDATA[
+   This CVE is a false positive according to the Jackson project maintainers.
+   See https://github.com/FasterXML/jackson-databind/issues/3972
+   ]]></notes>
+   <cve>CVE-2023-35116</cve>
+</suppress>
 </suppressions>