summaryrefslogtreecommitdiffhomepage
path: root/android
diff options
context:
space:
mode:
authorJonatan Rhodin <jonatan.rhodin@mullvad.net>2024-08-07 13:57:49 +0200
committerDavid Göransson <david.goransson@mullvad.net>2024-08-07 17:59:15 +0200
commit63d06a36e3e24c871a0a026400c8ca60df28d549 (patch)
treee23e525d9acd32135eecade6053d0498fa2079dc /android
parentc5dc4279c4bd700643bbdf6ba6a3f0f8a85df1d9 (diff)
downloadmullvadvpn-63d06a36e3e24c871a0a026400c8ca60df28d549.tar.xz
mullvadvpn-63d06a36e3e24c871a0a026400c8ca60df28d549.zip
Add GHSA-xpw8-rcwv-8f8p to osv scanner ignore
Diffstat (limited to 'android')
-rw-r--r--android/gradle/osv-scanner.toml6
1 files changed, 6 insertions, 0 deletions
diff --git a/android/gradle/osv-scanner.toml b/android/gradle/osv-scanner.toml
index 07d829b468..a308177e6e 100644
--- a/android/gradle/osv-scanner.toml
+++ b/android/gradle/osv-scanner.toml
@@ -22,6 +22,12 @@ id = "CVE-2023-44487" # GHSA-xpw8-rcwv-8f8p
ignoreUntil = 2024-11-02
reason = "No impact on this app since it uses UDS rather than HTTP2."
+# Same as the vuln above, but it seems like osv scanner does not always make the connection.
+[[IgnoredVulns]]
+id = "GHSA-xpw8-rcwv-8f8p"
+ignoreUntil = 2024-11-02
+reason = "No impact on this app since it uses UDS rather than HTTP2."
+
[[IgnoredVulns]]
id = "CVE-2023-34462" # GHSA-6mjq-h674-j845
ignoreUntil = 2024-11-02