summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2025-04-02 13:13:23 +0200
committerMarkus Pettersson <markus.pettersson@mullvad.net>2025-04-02 13:13:23 +0200
commitf0e62b9be7d4e2c69ee04cdcaa6ad11437e358cc (patch)
treea502c9254d67cc0283e5c5c4ad5fc748844e3c4c
parent921990cbbbfd2966fc1a2caa46a008ac1e6f9f88 (diff)
parent5e72930b9a1d2c4f862d517f83e146d527e82999 (diff)
downloadmullvadvpn-f0e62b9be7d4e2c69ee04cdcaa6ad11437e358cc.tar.xz
mullvadvpn-f0e62b9be7d4e2c69ee04cdcaa6ad11437e358cc.zip
Merge branch 'silence-go-2025-350'
-rw-r--r--wireguard-go-rs/libwg/osv-scanner.toml6
1 files changed, 6 insertions, 0 deletions
diff --git a/wireguard-go-rs/libwg/osv-scanner.toml b/wireguard-go-rs/libwg/osv-scanner.toml
index 056e788f61..54bb68e475 100644
--- a/wireguard-go-rs/libwg/osv-scanner.toml
+++ b/wireguard-go-rs/libwg/osv-scanner.toml
@@ -52,3 +52,9 @@ reason = "wireguard-go does not use the affected code"
id = "CVE-2025-22866" # GO-2025-3447
ignoreUntil = 2025-06-12
reason = "wireguard-go does not use the affected code"
+
+# HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
+[[IgnoredVulns]]
+id = "CVE-2025-22870" # GO-2025-3503
+ignoreUntil = 2025-07-01
+reason = "wireguard-go does not use x/net/proxy nor x/net/http/httpproxy"