From 530fa167032c88efa1897e040acd9baceec4ea3a Mon Sep 17 00:00:00 2001
From: Sunny Wu <sunny.wu@thetradedesk.com>
Date: Mon, 2 Mar 2026 11:38:14 +1100
Subject: [PATCH] [UID2-6670] Suppress GHSA-72hv-8253-57qq: jackson-core async
 parser not used

---
 .trivyignore | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.trivyignore b/.trivyignore
index ab7245e..8262552 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -5,3 +5,7 @@
 # gnutls DoS vulnerability via crafted ClientHello - not impactful as gnutls is not used by our Java service
 # See: UID2-6655
 CVE-2026-1584 exp:2026-08-27
+
+# jackson-core async parser DoS - not exploitable, services only use synchronous ObjectMapper API
+# See: UID2-6670
+GHSA-72hv-8253-57qq exp:2026-09-01