summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorOskar <oskar@mullvad.net>2024-10-17 15:27:34 +0200
committerOskar <oskar@mullvad.net>2024-10-17 15:27:34 +0200
commita6b2db5e8ffefc4197edf7b092bf47662f365fb9 (patch)
treee8be6b30015c44ac19ede48b1c00eb98192c578a
parentac405846bb1cb1faa56e9aa2ff1fb2a772e33379 (diff)
parent52e51b8f9fe9df42300c295e3bcaa24e2423f830 (diff)
downloadmullvadvpn-a6b2db5e8ffefc4197edf7b092bf47662f365fb9.tar.xz
mullvadvpn-a6b2db5e8ffefc4197edf7b092bf47662f365fb9.zip
Merge branch 'increase-node-gettext-osv-scanner-suppression'
-rw-r--r--gui/osv-scanner.toml4
1 files changed, 2 insertions, 2 deletions
diff --git a/gui/osv-scanner.toml b/gui/osv-scanner.toml
index 3767022435..d79251d9f5 100644
--- a/gui/osv-scanner.toml
+++ b/gui/osv-scanner.toml
@@ -27,5 +27,5 @@ reason = "This is just a dev dependency, and we don't have untrusted input to mi
# node-gettext: Prototype Pullution via the addTranslations function
[[IgnoredVulns]]
id = "CVE-2024-21528" # GHSA-g974-hxvm-x689
-ignoreUntil = 2024-10-17
-reason = "There is no fix yet, in the meantime we'll have to verify translations thoroughly"
+ignoreUntil = 2025-01-17
+reason = "There is no fix yet and we don't send untrusted input to the first argument of addTranslations"