mullvadvpn - The Mullvad VPN client app for desktop and mobile

Age	Commit message (Collapse)	Author	Files	Lines
2022-12-13	Set CVE suppression expiration to 2023-05-01	Albin	1	-8/+8

2022-12-13	Suppress CVE-2022-3510	Albin	1	-0/+1

2022-12-08	Suppress test framework CVEs	Albin	1	-0/+40
	CVEs: - CVE-2020-8908 - CVE-2021-37714 - CVE-2022-36033
2022-12-08	Update suppression of CVE-2022-3171	Albin	1	-1/+14

2022-12-08	Update suppression of CVE-2021-22569	Albin	1	-3/+5

2022-12-08	Remove suppression of CVE-2022-24329	Albin	1	-6/+0
	This CVE has been fixed upstream.
2022-12-08	Suppress CVE-2021-37533	Albin	1	-0/+15
	This CVE affects the Apache Commons Net's FTP client that this app doesn't use. https://www.openwall.com/lists/oss-security/2022/12/03/1 File names: - commons-beanutils-1.9.4.jar - commons-collections-3.2.2.jar - commons-digester-2.1.jar - commons-logging-1.2.jar - commons-validator-1.7.jar
2022-10-07	Suppress CVE-2022-3171 from automatic audit checks	Albin	1	-0/+7
	This suppression only affects the Android app. The CVE will instead be tracked externally and will likely be mitigated by either updating affected dependencies or by identifying that it doesn't affect the app.
2022-06-15	Suppress false positive CVE-2021-22569	Albin	1	-0/+8

2022-03-09	Suppress false positive Android CVE	Albin	1	-0/+9
	The CVE (CVE-2022-24329) only affects "Multiplatform Gradle Projects" according to the CVE description, which this is not, and therefore it's considered a false positive.