summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorOliver <oliver@mohlin.dev>2024-11-26 13:43:05 +0100
committerLinus Färnstrand <linus@mullvad.net>2024-11-26 13:59:10 +0100
commit9e0b4f16bac31012047d2f80706d217b86fdceff (patch)
tree5c980c7d4e1648d1b78cc9b75250a6e5cdc56229
parenta11f65945a036ff7dc7b9e5830ee5595a7c5037d (diff)
downloadmullvadvpn-9e0b4f16bac31012047d2f80706d217b86fdceff.tar.xz
mullvadvpn-9e0b4f16bac31012047d2f80706d217b86fdceff.zip
Extend ignore for CVE-2024-4067
-rw-r--r--desktop/osv-scanner.toml2
1 files changed, 1 insertions, 1 deletions
diff --git a/desktop/osv-scanner.toml b/desktop/osv-scanner.toml
index d79251d9f5..58839334cd 100644
--- a/desktop/osv-scanner.toml
+++ b/desktop/osv-scanner.toml
@@ -21,7 +21,7 @@ reason = "This package is only used to match paths from either us or trusted lib
# micromatch (dev): Regular Expression Denial of Service (ReDoS) in micromatch
[[IgnoredVulns]]
id = "CVE-2024-4067" # GHSA-952p-6rrq-rcjv
-ignoreUntil = 2024-11-23
+ignoreUntil = 2025-02-23
reason = "This is just a dev dependency, and we don't have untrusted input to micromatch there"
# node-gettext: Prototype Pullution via the addTranslations function