mullvadvpn - The Mullvad VPN client app for desktop and mobile

Age	Commit message (Collapse)	Author	Files	Lines
2024-06-07	Push suppression of CVE-2018-1000840	Albin	1	-1/+1
	Pushing the suppression a few months so that we can revisit it after bumping to K2.
2024-05-29	Migrate to gRPC	David Göransson	1	-11/+11
	Co-authored-by: Jonatan Rhodin <jonatan.rhodin@mullvad.net> Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net> Co-authored-by: David Lönnhager <david.l@mullvad.net>
2024-05-06	Push suppression date for CVE-2022-24329	Albin	1	-1/+1
	Reasons: * Not affecting our project. * Transitive dependency that require update in upstream dependencies.
2024-05-06	Remove outdated suppression rules	Albin	1	-42/+0

2024-04-15	Suppress Joda-Time CVE-2024-23080	Albin	1	-0/+9

2024-03-20	Remove suppression of tapjacking	Jonatan Rhodin	1	-3/+0

2024-03-12	Suppress false-positive CVE-2014-9152	Albin	1	-0/+8

2024-02-19	Allow any length for test names	Jonatan Rhodin	1	-0/+1

2024-02-05	Add baseline	David Göransson	1	-0/+616

2024-02-05	Apply custom compose, report and other detekt rules	David Göransson	1	-37/+163

2024-02-05	Add default generated detekt config	David Göransson	1	-0/+784

2023-12-14	Add compose destinations navigation dependency	David Göransson	1	-0/+9

2023-12-06	Update CVE suppression	David Göransson	1	-1/+1

2023-11-22	Add mobsf config to suppress and document issues	Albin	1	-0/+28

2023-11-06	Push suppression date for unfixed non-critical CVEs	Albin	1	-3/+3

2023-09-14	Push suppression date for CVE-2023-2976	Albin	1	-1/+1
	Pushing the suppression date since not much new information is available and no upstream release has been made of the affected library (espresso).
2023-07-27	Suppress CVE-2023-3635	Albin	1	-0/+10

2023-06-13	Set lint to ignore typography ellipsis errors	Jonatan Rhodin	1	-0/+2

2023-06-07	Update gradle dependency suppressions	Albin	1	-69/+7

2023-05-19	Bump kotlin and agp	Albin	1	-0/+8

2023-05-15	Ignore unused resource warning for strings	Albin	1	-0/+3

2023-05-03	Push suppression review date	Albin	1	-7/+7
	New review date: 2023-06-01
2023-03-28	Ignore localization workflow related lint rules	Albin	1	-1/+3

2023-03-16	Ignore MissingTranslation issues	Albin	1	-0/+2

2023-03-16	Add empty lint config	Albin	1	-0/+3

2023-01-10	Suppress CVE-2021-4277	Albin	1	-0/+20

2022-12-16	Update compose to 1.3.2	Albin	1	-11/+0
	This fixes the following transitive CVEs in Compose: - CVE-2022-3171 - CVE-2022-3510 However, the mentioned CVEs are still present via the espresso-contrib dependency.
2022-12-13	Set CVE suppression expiration to 2023-05-01	Albin	1	-8/+8

2022-12-13	Suppress CVE-2022-3510	Albin	1	-0/+1

2022-12-08	Suppress test framework CVEs	Albin	1	-0/+40
	CVEs: - CVE-2020-8908 - CVE-2021-37714 - CVE-2022-36033
2022-12-08	Update suppression of CVE-2022-3171	Albin	1	-1/+14

2022-12-08	Update suppression of CVE-2021-22569	Albin	1	-3/+5

2022-12-08	Remove suppression of CVE-2022-24329	Albin	1	-6/+0
	This CVE has been fixed upstream.
2022-12-08	Suppress CVE-2021-37533	Albin	1	-0/+15
	This CVE affects the Apache Commons Net's FTP client that this app doesn't use. https://www.openwall.com/lists/oss-security/2022/12/03/1 File names: - commons-beanutils-1.9.4.jar - commons-collections-3.2.2.jar - commons-digester-2.1.jar - commons-logging-1.2.jar - commons-validator-1.7.jar
2022-10-07	Suppress CVE-2022-3171 from automatic audit checks	Albin	1	-0/+7
	This suppression only affects the Android app. The CVE will instead be tracked externally and will likely be mitigated by either updating affected dependencies or by identifying that it doesn't affect the app.
2022-06-15	Suppress false positive CVE-2021-22569	Albin	1	-0/+8

2022-03-09	Suppress false positive Android CVE	Albin	1	-0/+9
	The CVE (CVE-2022-24329) only affects "Multiplatform Gradle Projects" according to the CVE description, which this is not, and therefore it's considered a false positive.