Skip to content

Commit 08f3c76

Browse files
authored
Merge pull request #379 from IABTechLab/syw-UID2-6670-suppress-GHSA-72hv-8253-57qq
[UID2-6670] Suppress GHSA-72hv-8253-57qq: jackson-core async parser not used
2 parents c778328 + 530fa16 commit 08f3c76

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

.trivyignore

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,3 +5,7 @@
55
# gnutls DoS vulnerability via crafted ClientHello - not impactful as gnutls is not used by our Java service
66
# See: UID2-6655
77
CVE-2026-1584 exp:2026-08-27
8+
9+
# jackson-core async parser DoS - not exploitable, services only use synchronous ObjectMapper API
10+
# See: UID2-6670
11+
GHSA-72hv-8253-57qq exp:2026-09-01

0 commit comments

Comments
 (0)