diff options
| author | David Göransson <david.goransson@mullvad.net> | 2025-09-05 10:14:08 +0200 |
|---|---|---|
| committer | David Göransson <david.goransson@mullvad.net> | 2025-09-05 11:31:46 +0200 |
| commit | ba692a5d712b4c4954db11da854554d4b54d9480 (patch) | |
| tree | c916d15c5da67783b1b343561f31882779c3d722 | |
| parent | d090433bd2588e43fb328b260b0c4de478458965 (diff) | |
| download | mullvadvpn-ba692a5d712b4c4954db11da854554d4b54d9480.tar.xz mullvadvpn-ba692a5d712b4c4954db11da854554d4b54d9480.zip | |
Push and align expiry dates
| -rw-r--r-- | android/gradle/osv-scanner.toml | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/android/gradle/osv-scanner.toml b/android/gradle/osv-scanner.toml index 613d5ccc06..d9ebfe503c 100644 --- a/android/gradle/osv-scanner.toml +++ b/android/gradle/osv-scanner.toml @@ -58,35 +58,35 @@ reason = "This CVE only affect Multiplatform Gradle Projects, which this project # netty: Denial of Service attack on windows app [[IgnoredVulns]] id = "CVE-2024-47535" # GHSA-xq3w-v528-46rv -ignoreUntil = 2025-09-13 +ignoreUntil = 2025-11-01 reason = "Only impacting Windows." # netty: Denial of Service attack on windows app [[IgnoredVulns]] id = "CVE-2025-25193" # GHSA-389x-839f-4rhx -ignoreUntil = 2025-09-13 +ignoreUntil = 2025-11-01 reason = "Only impacting Windows." # netty: Crash when using native SSLEngine [[IgnoredVulns]] id = "CVE-2025-24970" # GHSA-4g8c-wm8x-jfhw -ignoreUntil = 2025-09-13 +ignoreUntil = 2025-11-01 reason = "Netty is not used in conjunction with SSL." # netty: MadeYouReset HTTP/2 DDoS vulnerability [[IgnoredVulns]] id = "CVE-2025-55163" # GHSA-prj3-ccx8-p6x4 -ignoreUntil = 2025-11-14 +ignoreUntil = 2025-11-01 reason = "No impact on this app since it uses UDS rather than HTTP2." # netty: Netty's decoders vulnerable to DoS via zip bomb style attack [[IgnoredVulns]] id = "CVE-2025-58057" # GHSA-3p8m-j85q-pgmj -ignoreUntil = 2025-12-04 +ignoreUntil = 2025-11-01 reason = "We do not use netty decoders" # netty: Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions [[IgnoredVulns]] id = "CVE-2025-58056" # GHSA-fghv-69vj-qj49 -ignoreUntil = 2025-12-04 +ignoreUntil = 2025-11-01 reason = "No impact on this app since it uses UDS rather than HTTP2." |