[owasp] suppress false positive Avro CVE-2021-43045 (#13764)
diff --git a/src/owasp-dependency-check-false-positives.xml b/src/owasp-dependency-check-false-positives.xml
index 6cc464e..7b945a2 100644
--- a/src/owasp-dependency-check-false-positives.xml
+++ b/src/owasp-dependency-check-false-positives.xml
@@ -47,6 +47,11 @@
<gav regex="true">org\.apache\.avro:.*</gav>
<cve>CVE-2019-17195</cve>
</suppress>
+ <suppress>
+ <notes>CVE-2021-43045 affects only .NET distro, see https://github.com/apache/avro/pull/1357</notes>
+ <gav regex="true">org\.apache\.avro:.*</gav>
+ <cve>CVE-2021-43045</cve>
+ </suppress>
<suppress base="true">
<notes><![CDATA[
FP per #3889