tmp ignore these CVEs until jackson releases the patches: FasterXML/jackson-databind#2410

ryber · ryber · commit 0a4474d6dbaf · 2019-09-20T20:44:32.000-05:00
diff --git a/pom.xml b/pom.xml
@@ -279,7 +279,12 @@
                         </goals>
                         <configuration>
                             <rules>
-                                <banVulnerable implementation="org.sonatype.ossindex.maven.enforcer.BanVulnerableDependencies" />
+                                <banVulnerable implementation="org.sonatype.ossindex.maven.enforcer.BanVulnerableDependencies">
+                                    <excludeVulnerabilityIds>
+                                        <exclude>fc1e8802-77e5-458f-b987-eb778c6ac2fc</exclude>
+                                        <exclude>3242fdc1-bfe9-46a6-af0c-0b8f57f56eb7</exclude>
+                                    </excludeVulnerabilityIds>
+                                </banVulnerable>
                             </rules>
                         </configuration>
                     </execution>
