summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorBug Magnet <marco.nikic@mullvad.net>2025-05-08 09:45:39 +0200
committerBug Magnet <marco.nikic@mullvad.net>2025-05-08 09:45:39 +0200
commit5c15feb7c8cde0da059b1d83a3769df3cc842ae7 (patch)
treec597759cf5bfd9a368e5ce5dc40f9a42d7d12c7b
parentcaf05bc110aeb3f6c0b4db9723629818e7e81d99 (diff)
downloadmullvadvpn-5c15feb7c8cde0da059b1d83a3769df3cc842ae7.tar.xz
mullvadvpn-5c15feb7c8cde0da059b1d83a3769df3cc842ae7.zip
Silence the rexml vulnerability for another 6 months
-rw-r--r--ci/ios/upload-vm/osv-scanner.toml2
1 files changed, 1 insertions, 1 deletions
diff --git a/ci/ios/upload-vm/osv-scanner.toml b/ci/ios/upload-vm/osv-scanner.toml
index 6d05cc1f49..52e72df6ac 100644
--- a/ci/ios/upload-vm/osv-scanner.toml
+++ b/ci/ios/upload-vm/osv-scanner.toml
@@ -2,7 +2,7 @@
# All of these attacks rely on the input being malicious. We only use this package in our trusted
# build environment with trusted inputs.
[[PackageOverrides]]
-effectiveUntil = 2025-05-01 # Ignored for 6 months at a time, it is unlikely to be an issue.
+effectiveUntil = 2025-11-01 # Ignored for 6 months at a time, it is unlikely to be an issue.
ignore = true
name = "rexml"
reason = "The XML payload is generated by Apple tooling which we trust" \ No newline at end of file