summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2024-12-19 12:35:49 +0100
committerMarkus Pettersson <markus.pettersson@mullvad.net>2024-12-19 12:35:49 +0100
commit2908bbe31e4875fd87003cf9303d00b78d9a11da (patch)
treef025164b2dc46b7dceb79e690215fdbd0f0c99bd
parentb49a484db38668c7570145279d09cf1cc0343094 (diff)
parent13ec5df6e9f17fbe4484e14a44c0a9de0a9486a5 (diff)
downloadmullvadvpn-2908bbe31e4875fd87003cf9303d00b78d9a11da.tar.xz
mullvadvpn-2908bbe31e4875fd87003cf9303d00b78d9a11da.zip
Merge branch 'silence-go-net-html-advisories'
-rw-r--r--wireguard-go-rs/libwg/osv-scanner.toml12
1 files changed, 12 insertions, 0 deletions
diff --git a/wireguard-go-rs/libwg/osv-scanner.toml b/wireguard-go-rs/libwg/osv-scanner.toml
index 90f0d4822f..28fcf5b78c 100644
--- a/wireguard-go-rs/libwg/osv-scanner.toml
+++ b/wireguard-go-rs/libwg/osv-scanner.toml
@@ -16,3 +16,15 @@ reason = "wireguard-go does not use the affected code"
id = "CVE-2024-34155" # GO-2024-3105
ignoreUntil = 2025-03-18
reason = "wireguard-go does not use the affected code"
+
+# Denial of service in HTML Parse function in go/net/html
+[[IgnoredVulns]]
+id = "CVE-2024-45338" # GO-2024-3333
+ignoreUntil = 2025-03-19
+reason = "wireguard-go does not use the affected code"
+
+# Denial of service in HTML Parse function in go/net/html
+[[IgnoredVulns]]
+id = "GHSA-w32m-9786-jp63" # GO-2024-3333
+ignoreUntil = 2025-03-19
+reason = "wireguard-go does not use the affected code"