From 6787ab73e276085fd8471dc6187615a9c41cf540 Mon Sep 17 00:00:00 2001
From: Kyle Scully <scullykns@gmail.com>
Date: Wed, 16 Nov 2022 13:06:46 -0800
Subject: [PATCH] Revert "chore: update jackson (#80)" (#82)

This reverts commit d44d2e4a314efd2119db55684b3b1122e295f3ba.
---
 suppressions.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/suppressions.xml b/suppressions.xml
index cbc052c..3222f4c 100644
--- a/suppressions.xml
+++ b/suppressions.xml
@@ -1,3 +1,12 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+    <suppress until="2022-11-17Z">
+        <notes><![CDATA[
+                file name: jackson-databind-2.13.4.jar
+                sev:HIGH
+                In FasterXML jackson-databind before 2.14.0-rc1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.
+            ]]></notes>
+        <packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@2.13.4.*$</packageUrl>
+        <cve>CVE-2022-42003</cve>
+    </suppress>
 </suppressions>
\ No newline at end of file