From 9af87ab3c4ee7f5ccf3497ab7c30091575cb68c3 Mon Sep 17 00:00:00 2001
From: Suneet Saldanha <suneet@apache.org>
Date: Sat, 10 Apr 2021 21:38:35 -0700
Subject: [PATCH] Suppress CVE in libthrift

---
 owasp-dependency-check-suppressions.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 8c55436b9151..30147fbe7b7c 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -307,6 +307,13 @@
      ]]></notes>
     <cve>CVE-2017-15288</cve>
   </suppress>
+  <suppress until="2021-04-30">
+    <!-- Suppress this until https://github.com/apache/druid/issues/11028 is resolved. -->
+    <notes><![CDATA[
+     This vulnerability should be fixed soon and the suppression should be removed.
+     ]]></notes>
+    <cve>CVE-2020-13949</cve>
+  </suppress>
 
   <suppress>
     <!-- (avro, parquet, integration-tests) we don't allow velocity templates to be uploaded by untrusted users -->