[owasp] suppress false positive netty-tc-native
<gav regex="true">org\.apache\.avro:.*</gav>
<cve>CVE-2019-17195</cve>
</suppress>
+ <suppress base="true">
+ <notes><![CDATA[
+ FP per #3889
+ ]]></notes>
+ <packageUrl regex="true">^pkg:maven/io\.netty/netty\-tcnative\-classes@.*$</packageUrl>
+ <cpe>cpe:/a:netty:netty</cpe>
+ </suppress>
</suppressions>
\ No newline at end of file
