From 8cc0e1c3da09581a9d0fb874d5d31ce761ee2dbb Mon Sep 17 00:00:00 2001
From: Nikola Naydenov <nikolanaydenov@Nikolas-MacBook-Pro.local>
Date: Tue, 24 Oct 2023 10:10:39 +0100
Subject: [PATCH] Suppress netty CVE with no fix

---
 config/owasp/suppressions.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
index 5e7ab8455..827e213ba 100644
--- a/config/owasp/suppressions.xml
+++ b/config/owasp/suppressions.xml
@@ -9,4 +9,11 @@
     <cve>CVE-2022-45688</cve>
     <cve>CVE-2023-5072</cve>
   </suppress>
+
+  <!-- No fix till netty 5 release or fix applied to netty 4 -->
+  <suppress base="true">
+    <gav regex="true">^.*netty.*$</gav>
+    <cve>CVE-2023-4586</cve>
+  </suppress>
+
 </suppressions>