Skip to content

Commit fe7af93

Browse files
committed
Add osv-scanner ignores for electron frontend npm stack
1 parent c5cfacf commit fe7af93

File tree

1 file changed

+26
-0
lines changed

1 file changed

+26
-0
lines changed

gui/osv-scanner.toml

+26
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
# See repository root `osv-scanner.toml` for instructions and rules for this file.
2+
3+
# @grpc/grpc-js: There are two separate code paths in which memory can be allocated per message in
4+
# excess of the grpc.max_receive_message_length channel option
5+
[[IgnoredVulns]]
6+
id = "CVE-2024-37168" # GHSA-7v5v-9h63-cj86
7+
ignoreUntil = 2024-09-05
8+
reason = "This component only receives gRPC messages from the trusted mullvad-daemon"
9+
10+
# yargs-parser Vulnerable to Prototype Pollution
11+
[[IgnoredVulns]]
12+
id = "CVE-2020-7608" # GHSA-p9pc-299p-vxgp
13+
ignoreUntil = 2024-09-05
14+
reason = ""
15+
16+
# PostCSS line return parsing error
17+
[[IgnoredVulns]]
18+
id = "CVE-2023-44270" # GHSA-7fh5-64p2-3v2j
19+
ignoreUntil = 2024-09-05
20+
reason = "This program does not parse untrusted CSS"
21+
22+
# braces: Uncontrolled resource consumption
23+
[[IgnoredVulns]]
24+
id = "CVE-2024-4068" # GHSA-grv7-fg5c-xmjg
25+
ignoreUntil = 2024-09-05
26+
reason = ""

0 commit comments

Comments
 (0)