From 7769eb680d95a602482739ca576ea82697696d97 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicol=C3=B2=20Boschi?= <boschi1997@gmail.com>
Date: Fri, 14 Jan 2022 15:02:59 +0100
Subject: [PATCH] [owasp] suppress false positive Avro CVE-2021-43045

---
 src/owasp-dependency-check-false-positives.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/owasp-dependency-check-false-positives.xml b/src/owasp-dependency-check-false-positives.xml
index 6cc464e637623..7b945a2bbc9ec 100644
--- a/src/owasp-dependency-check-false-positives.xml
+++ b/src/owasp-dependency-check-false-positives.xml
@@ -47,6 +47,11 @@
     <gav regex="true">org\.apache\.avro:.*</gav>
     <cve>CVE-2019-17195</cve>
   </suppress>
+  <suppress>
+    <notes>CVE-2021-43045 affects only .NET distro, see https://github.com/apache/avro/pull/1357</notes>
+    <gav regex="true">org\.apache\.avro:.*</gav>
+    <cve>CVE-2021-43045</cve>
+  </suppress>
   <suppress base="true">
     <notes><![CDATA[
         FP per #3889