From e65c636303080d11469d99f4eb0fda43801a6d5c Mon Sep 17 00:00:00 2001
From: Anton Oellerer <a.oellerer@docu-tools.com>
Date: Wed, 7 Dec 2022 08:41:13 +0100
Subject: [PATCH] Add surpression for false positive commons-net

---
 config/dependency-check/suppression.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/config/dependency-check/suppression.xml b/config/dependency-check/suppression.xml
index e768df1..4af3fb3 100644
--- a/config/dependency-check/suppression.xml
+++ b/config/dependency-check/suppression.xml
@@ -7,4 +7,11 @@
         <packageUrl regex="true">^pkg:maven/org\.apache\.logging\.log4j/log4j\-api@.*$</packageUrl>
         <cpe>cpe:/a:apache:log4j</cpe>
     </suppress>
+    <suppress base="true">
+        <notes><![CDATA[
+   FP per issue #5121 - fix for commons
+   ]]></notes>
+        <packageUrl regex="true">^(?!pkg:maven/commons-net/commons-net).*$</packageUrl>
+        <cpe>cpe:/a:apache:commons_net</cpe>
+    </suppress>
 </suppressions>