diff options
| author | Bug Magnet <marco.nikic@mullvad.net> | 2024-08-29 09:47:18 +0200 |
|---|---|---|
| committer | Bug Magnet <marco.nikic@mullvad.net> | 2024-08-29 11:22:57 +0200 |
| commit | 6c05bfccd213a68419b7d3204da1f896b7e66427 (patch) | |
| tree | a15dd7a28cb861a1b52126b6fb854172363709b7 | |
| parent | 2bc540023c60e6e749ce9196fe966cf5865bc9d1 (diff) | |
| download | mullvadvpn-6c05bfccd213a68419b7d3204da1f896b7e66427.tar.xz mullvadvpn-6c05bfccd213a68419b7d3204da1f896b7e66427.zip | |
Revert "Ignore rexml CVE-2024-43398"
This reverts commit 489f6160a62847e576a7170e8dc32f1cf12e8886.
| -rw-r--r-- | ci/ios/upload-vm/osv-scanner.toml | 8 | ||||
| -rw-r--r-- | ios/osv-scanner.toml | 8 |
2 files changed, 0 insertions, 16 deletions
diff --git a/ci/ios/upload-vm/osv-scanner.toml b/ci/ios/upload-vm/osv-scanner.toml deleted file mode 100644 index 1a26a0cfe2..0000000000 --- a/ci/ios/upload-vm/osv-scanner.toml +++ /dev/null @@ -1,8 +0,0 @@ -# See repository root `osv-scanner.toml` for instructions and rules for this file. - -# rexml: The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML -# that has many deep elements that have same local name attributes. -[[IgnoredVulns]] -id = "CVE-2024-43398" # GHSA-952p-6rrq-rcjv -ignoreUntil = 2024-11-23 -reason = "rexml only parses trusted input (responses from Apple's APIs) in this code" diff --git a/ios/osv-scanner.toml b/ios/osv-scanner.toml deleted file mode 100644 index 1a26a0cfe2..0000000000 --- a/ios/osv-scanner.toml +++ /dev/null @@ -1,8 +0,0 @@ -# See repository root `osv-scanner.toml` for instructions and rules for this file. - -# rexml: The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML -# that has many deep elements that have same local name attributes. -[[IgnoredVulns]] -id = "CVE-2024-43398" # GHSA-952p-6rrq-rcjv -ignoreUntil = 2024-11-23 -reason = "rexml only parses trusted input (responses from Apple's APIs) in this code" |