diff options
| author | Tobias Järvelöv <tobias.jarvelov@mullvad.net> | 2025-09-24 11:54:07 +0200 |
|---|---|---|
| committer | Tobias Järvelöv <tobias.jarvelov@mullvad.net> | 2025-09-24 14:28:42 +0200 |
| commit | bada60ab58fde84353c59d3d301ad396ed5e1379 (patch) | |
| tree | 5f632ff6ffd002b866671cd1780093259cc638b4 | |
| parent | 5bbefd63bf4d5b1b5c659749f6e3430a209485c0 (diff) | |
| download | mullvadvpn-bada60ab58fde84353c59d3d301ad396ed5e1379.tar.xz mullvadvpn-bada60ab58fde84353c59d3d301ad396ed5e1379.zip | |
Remove ignore of patched vulnerabilities
The vulnerabilities have been patched by updating vite to 7.1.7
| -rw-r--r-- | desktop/osv-scanner.toml | 11 |
1 files changed, 0 insertions, 11 deletions
diff --git a/desktop/osv-scanner.toml b/desktop/osv-scanner.toml index 771ca110d4..b44ff638b6 100644 --- a/desktop/osv-scanner.toml +++ b/desktop/osv-scanner.toml @@ -30,14 +30,3 @@ id = "CVE-2025-55305" # GHSA-vmqv-hx8q-j7mg ignoreUntil = 2025-12-04 reason = "The embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses aren't enabled" -# vite: The vulnerable code is only used in development and not in production and requires local system access to exploit. -[[IgnoredVulns]] -id = "CVE-2025-58751" # GHSA-g4jq-h2w9-997c -ignoreUntil = 2025-09-30 -reason = "Fixing requires upgrading vite to a new major version, which will take a few days." - -# vite: The vulnerable code is only used in development and not in production and requires local system access to exploit. -[[IgnoredVulns]] -id = "CVE-2025-58752" # GHSA-jqfw-vq24-v9c3 -ignoreUntil = 2025-09-30 -reason = "Fixing requires upgrading vite to a new major version, which will take a few days." |