New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ignore CVEs which aren't relevant #33

Merged

glitchcrab merged 3 commits into main from update/nancy-ignore

Aug 14, 2023

Member

glitchcrab commented Aug 14, 2023

This PR ignores the following CVEs:

CVE-2023-3978 - Improper Neutralization of Input During Web Page Generation.
- XSS bug, doesn't affect this repo.
CVE-2023-29401 - gRPC HTTP2 header size exceeded error.
- we ignore this everywhere already

Checklist

Update changelog in CHANGELOG.md.


          ignore CVEs which aren't relevant

a9cd841

glitchcrab requested a review from a team as a code owner

August 14, 2023 11:32

glitchcrab self-assigned this

glitchcrab added 2 commits

August 14, 2023 12:53


          extend ignore for CVE-2020-8561

cae0004


          add additional related GRPC CVE

75421ea

vxav approved these changes

View reviewed changes

glitchcrab merged commit ddf3535 into main

2 checks passed

glitchcrab deleted the update/nancy-ignore branch

August 14, 2023 12:56

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet