summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2025-10-30 09:51:53 +0100
committerMarkus Pettersson <markus.pettersson@mullvad.net>2025-10-30 15:07:29 +0100
commitdd6edbc8fceb87090069e4c6d1884fa725ad6c95 (patch)
treebb32bfaea200205b28232370f6106159aa78b676
parentd97baf6d74b638fcb6546e70b344654e3cc306da (diff)
downloadmullvadvpn-dd6edbc8fceb87090069e4c6d1884fa725ad6c95.tar.xz
mullvadvpn-dd6edbc8fceb87090069e4c6d1884fa725ad6c95.zip
Ignore GO-2025-4009
-rw-r--r--wireguard-go-rs/libwg/osv-scanner.toml6
1 files changed, 6 insertions, 0 deletions
diff --git a/wireguard-go-rs/libwg/osv-scanner.toml b/wireguard-go-rs/libwg/osv-scanner.toml
index 8461b9cf5e..8850cb0e49 100644
--- a/wireguard-go-rs/libwg/osv-scanner.toml
+++ b/wireguard-go-rs/libwg/osv-scanner.toml
@@ -119,3 +119,9 @@ reason = "'This affects programs which validate arbitrary certificate chains.' w
id = "CVE-2025-58189" # GO-2025-4008
ignoreUntil = 2026-10-30
reason = "wireguard-go does not use crypto/tls"
+
+# Quadratic complexity when parsing some invalid inputs (encoding/pem)
+[[IgnoredVulns]]
+id = "CVE-2025-61723" # GO-2025-4009
+ignoreUntil = 2026-10-30
+reason = "wireguard-go does not use encoding/pem"