Skip to content

Commit efcbdc8

Browse files
olmohraksooo
authored andcommitted
Extend ignores for CVEs
1 parent e95eb34 commit efcbdc8

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

desktop/osv-scanner.toml

+3-3
Original file line numberDiff line numberDiff line change
@@ -3,19 +3,19 @@
33
# PostCSS line return parsing error
44
[[IgnoredVulns]]
55
id = "CVE-2023-44270" # GHSA-7fh5-64p2-3v2j
6-
ignoreUntil = 2025-03-05
6+
ignoreUntil = 2025-06-05
77
reason = "This project does not use PostCSS to parse untrusted CSS"
88

99
# braces: Uncontrolled resource consumption
1010
[[IgnoredVulns]]
1111
id = "CVE-2024-4068" # GHSA-grv7-fg5c-xmjg
12-
ignoreUntil = 2025-03-05
12+
ignoreUntil = 2025-06-05
1313
reason = "This package is only used to match paths from either us or trusted libraries"
1414

1515
# micromatch (dev): Regular Expression Denial of Service (ReDoS) in micromatch
1616
[[IgnoredVulns]]
1717
id = "CVE-2024-4067" # GHSA-952p-6rrq-rcjv
18-
ignoreUntil = 2025-02-23
18+
ignoreUntil = 2025-05-23
1919
reason = "This is just a dev dependency, and we don't have untrusted input to micromatch there"
2020

2121
# node-gettext: Prototype Pullution via the addTranslations function

0 commit comments

Comments
 (0)