summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorDavid Göransson <david.goransson@mullvad.net>2026-04-17 10:55:52 +0200
committerDavid Göransson <david.goransson@mullvad.net>2026-04-17 11:34:58 +0200
commit76e67e721204af6f3ebaa2bb371e6b03a7f42535 (patch)
tree78255a1d3063d01fe5c299f61d9b0ff80b0be9c1
parent9daa055414d7eac8d471459b9e85e28057b9b797 (diff)
downloadmullvadvpn-76e67e721204af6f3ebaa2bb371e6b03a7f42535.tar.xz
mullvadvpn-76e67e721204af6f3ebaa2bb371e6b03a7f42535.zip
Add ignore for GHSA-wg6q-6289-32hp
-rw-r--r--android/gradle/osv-scanner.toml6
1 files changed, 6 insertions, 0 deletions
diff --git a/android/gradle/osv-scanner.toml b/android/gradle/osv-scanner.toml
index dcf510c915..a7335c2e69 100644
--- a/android/gradle/osv-scanner.toml
+++ b/android/gradle/osv-scanner.toml
@@ -108,3 +108,9 @@ reason = "The app does not use netty for external http communication"
id = "CVE-2026-33871" # GHSA-w9fj-cfpg-grvv
ignoreUntil = 2026-05-01
reason = "The app does not use netty for external http communication"
+
+# Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modules
+[[IgnoredVulns]]
+id = "CVE-2026-5588" # GHSA-wg6q-6289-32hp
+ignoreUntil = 2026-08-01
+reason = "The app does not use dependency directly, it is used by AGP that builds the app, no impact on app"