mullvadvpn - The Mullvad VPN client app for desktop and mobile

Age	Commit message (Collapse)	Author	Files	Lines
2023-01-10	Move :e2e project to :test:e2e	Albin	1	-95/+0
	Also changes source directory from "java" to "kotlin" which is supported since upgrading the project from AGP 3.x to 7.x.
2023-01-10	Suppress CVE-2021-4277	Albin	1	-0/+20

2022-12-21	Suppress CVE-2022-41881	Albin	1	-2/+3

2022-12-16	Update compose to 1.3.2	Albin	1	-8/+0
	This fixes the following transitive CVEs in Compose: - CVE-2022-3171 - CVE-2022-3510 However, the mentioned CVEs are still present via the espresso-contrib dependency.
2022-12-13	Set CVE suppression expiration to 2023-05-01	Albin	1	-7/+7

2022-12-13	Remove outdated suppressions	Albin	1	-15/+0

2022-12-13	Suppress CVE-2022-41915	Albin	1	-0/+1

2022-12-13	Suppress CVE-2022-3510	Albin	1	-0/+2

2022-12-08	Suppress CVEs in e2e project	Albin	1	-6/+54
	Some of the CVEs doesn't affect the project and some will be tracked externally.
2022-12-08	Suppress CVE-2021-37533	Albin	1	-0/+15
	This CVE affects the Apache Commons Net's FTP client that this app doesn't use. https://www.openwall.com/lists/oss-security/2022/12/03/1 File names: - commons-beanutils-1.9.4.jar - commons-collections-3.2.2.jar - commons-digester-2.1.jar - commons-logging-1.2.jar - commons-validator-1.7.jar
2022-10-07	Suppress CVE-2022-3171 from automatic audit checks	Albin	1	-0/+7
	This suppression only affects the Android app. The CVE will instead be tracked externally and will likely be mitigated by either updating affected dependencies or by identifying that it doesn't affect the app.
2022-06-15	Suppress false positive CVE-2021-22569	Albin	1	-0/+8

2022-04-20	Fix/suppress dependency audit issues	Albin	1	-0/+16