Skip to content

Commit

Permalink
chore: update audit list (#447)
Browse files Browse the repository at this point in the history
  • Loading branch information
douglance authored Apr 9, 2024
1 parent 0eeeed2 commit 01af6ef
Showing 1 changed file with 11 additions and 1 deletion.
12 changes: 11 additions & 1 deletion audit-ci.jsonc
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,16 @@
// axios can leak auth headers when using `Proxy-Authentication` header. We do not use that header.
// from: axios>follow-redirects
// from: hardhat>solc>follow-redirects
"GHSA-cxjh-pqwp-8mfp"
"GHSA-cxjh-pqwp-8mfp",
// https://github.com/advisories/GHSA-9qxr-qj54-h672
// Undici's fetch with integrity option is too lax when algorithm is specified but hash value is incorrect
// hardhat requests are only done during development
// from: hardhat>undici
"GHSA-9qxr-qj54-h672",
// https://github.com/advisories/GHSA-m4v8-wqvr-p9f7
// Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
// hardhat requests are only done during development
// from: hardhat>undici
"GHSA-m4v8-wqvr-p9f7"
]
}

0 comments on commit 01af6ef

Please sign in to comment.