mullvadvpn - The Mullvad VPN client app for desktop and mobile

Age	Commit message (Collapse)	Author	Files	Lines
2025-10-22	Extend ignore of node-gettext vulnerability	Tobias Järvelöv	1	-1/+1
	No fix exists and we do not send untrusted input to the affected addTranslations method. The vulnerability is ignored for 6 months as the affected library is not receiving updates and we can not patch the vulnerability without migrating to another library, which is no minor feat.
2025-09-24	Remove ignore of patched vulnerabilities	Tobias Järvelöv	1	-11/+0
	The vulnerabilities have been patched by updating vite to 7.1.7
2025-09-23	Extend ignore of vite vulnerability	Tobias Järvelöv	1	-2/+2
	See the following commit for more info about the ignored vulnerabilities: bc04272cbe1c2956ff31efcdccb313c1d69c5447
2025-09-11	Ignore vite vulnerability for a week	Tobias Järvelöv	1	-0/+12
	The vulnerable code is only used in development and not in production and requires local system access to exploit. Fixing requires upgrading vite to a new major version, which will take a few days.
2025-09-05	Ignore CVE-2025-55305	Oskar	1	-0/+6

2025-07-18	Bump ignore date for node-gettext vuln	David Lönnhager	1	-1/+1

2025-04-17	Extend ignore for CVE-2024-21528	Tobias Järvelöv	1	-1/+1

2025-03-13	Extend ignores for CVEs	Oliver	1	-3/+3

2025-01-17	Extend ignore for CVE-2024-21528	Oliver	1	-1/+1

2024-12-05	Remove ignore for CVE-2020-7608	Oliver	1	-6/+0

2024-12-05	Extend ignore for CVE-2023-44270 and CVE-2024-4068	Oliver	1	-2/+2

2024-11-26	Extend ignore for CVE-2024-4067	Oliver	1	-1/+1

2024-11-19	Remove elliptic from osv-scanner ignore list	Oskar	1	-6/+0

2024-11-14	Create workspace package.json and move osv-scanner.toml	Oskar	1	-0/+37