Skip to content

Commit 147b3a0

Browse files
authored
Merge pull request #2401 from IABTechLab/syw-UID2-6670-suppress-GHSA-72hv-8253-57qq
[UID2-6670] Suppress GHSA-72hv-8253-57qq: jackson-core async parser not used
2 parents d8857e7 + d5166a2 commit 147b3a0

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

.trivyignore

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,8 @@ CVE-2025-68973 exp:2026-06-15
1010

1111
# gnutls DoS vulnerability via crafted ClientHello - not impactful as gnutls is not used by our Java service
1212
# See: UID2-6655
13-
CVE-2026-1584 exp:2026-08-27
13+
CVE-2026-1584 exp:2026-08-27
14+
15+
# jackson-core async parser DoS - not exploitable, services only use synchronous ObjectMapper API
16+
# See: UID2-6670
17+
GHSA-72hv-8253-57qq exp:2026-09-01

0 commit comments

Comments
 (0)