mirror of
https://github.com/kovidgoyal/kitty.git
synced 2025-12-13 20:36:22 +01:00
Ignore inapplicable CVE
This commit is contained in:
1
.github/workflows/ci.py
vendored
1
.github/workflows/ci.py
vendored
@@ -221,6 +221,7 @@ IGNORED_DEPENDENCY_CVES = [
|
||||
'CVE-2025-8194', # DoS in tarfile
|
||||
'CVE-2025-6069', # DoS in HTMLParser
|
||||
'CVE-2025-13836', # DoS in http client reading from malicious server
|
||||
'CVE-2025-12084', # DoS in xml.dom.minidom unused in kitty
|
||||
# glib
|
||||
'CVE-2025-4056', # Only affects Windows, on which we dont run
|
||||
# github.com/nwaples/rardecode/v2
|
||||
|
||||
Reference in New Issue
Block a user