From 7bdb9ebdf1b072924d62855e028f3de3aa8c851e Mon Sep 17 00:00:00 2001
From: Abhishek Agarwal <1477457+abhishekagarwal87@users.noreply.github.com>
Date: Tue, 18 Jan 2022 21:09:48 +0530
Subject: [PATCH] Suppress Avro CVEs (#12166)

---
 owasp-dependency-check-suppressions.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 842ebb89a52..be02807ca38 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -462,4 +462,12 @@
     <cve>CVE-2015-7430</cve>
     <cve>CVE-2017-3162</cve>
   </suppress>
+  
+  <suppress>
+    <!-- Suppress avro cves that are only applicable to .NET SDK-->
+    <notes><![CDATA[
+    file name: avro-1.9.2.jar or avro-ipc-jetty-1.9.2.jar
+    ]]></notes>
+    <cve>CVE-2021-43045</cve>
+  </suppress>
 </suppressions>