diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml index 181b1b0ca..71776a9a1 100644 --- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml +++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml @@ -462,15 +462,15 @@ - com\.fasterxml\.jackson\.core:jackson.* + (org\.codehaus\.jackson|com\.fasterxml\.jackson\.core):jackson.* CVE-2016-3720 + This CVE only affects jackson-dataformat-xml. See issue #517. + ]]> com\.fasterxml\.jackson\.dataformat:jackson(?!\-dataformat\-xml).* CVE-2016-3720