summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorDavid Lönnhager <david.l@mullvad.net>2025-09-19 10:05:10 +0200
committerDavid Lönnhager <david.l@mullvad.net>2025-09-23 10:27:43 +0200
commit30480670537422a6afe559b0ca7a2cfe8a8aeb37 (patch)
treef5433fe37572dda95f24efc7dbf778b9fe56de6d
parentb03b207a238bc3562d0f78d5c1b5c9825ef86d93 (diff)
downloadmullvadvpn-30480670537422a6afe559b0ca7a2cfe8a8aeb37.tar.xz
mullvadvpn-30480670537422a6afe559b0ca7a2cfe8a8aeb37.zip
Ignore CVE-2025-47906 since it does not affect wireguard-go
-rw-r--r--wireguard-go-rs/libwg/osv-scanner.toml6
1 files changed, 6 insertions, 0 deletions
diff --git a/wireguard-go-rs/libwg/osv-scanner.toml b/wireguard-go-rs/libwg/osv-scanner.toml
index fc3ba9e000..02244ce698 100644
--- a/wireguard-go-rs/libwg/osv-scanner.toml
+++ b/wireguard-go-rs/libwg/osv-scanner.toml
@@ -94,3 +94,9 @@ reason = "wireguard-go does not use crypto/x509"
id = "CVE-2025-47907" # GO-2025-3849
ignoreUntil = 2026-09-12
reason = "wireguard-go does not use database/sql"
+
+# Unexpected paths returned from LookPath in os/exec
+[[IgnoredVulns]]
+id = "CVE-2025-47906" # GO-2025-3956
+ignoreUntil = 2026-09-12
+reason = "wireguard-go does not use os/exec"