From 48a320755b3c444932f2185a55b95f334cfa4182 Mon Sep 17 00:00:00 2001 From: jonholdsworth <82071930+jonholdsworth@users.noreply.github.com> Date: Wed, 11 Dec 2024 16:11:43 +1100 Subject: [PATCH] OSV ignore GHSA-rrqc-c2jx-6jgv to suppress build warnings (We have a Django upgrade in progress anyway that will address this vuln) --- .osv-detector.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.osv-detector.yml b/.osv-detector.yml index 2d4acb90..59841218 100644 --- a/.osv-detector.yml +++ b/.osv-detector.yml @@ -9,3 +9,4 @@ ignore: - GHSA-248v-346w-9cwc # Certifi removes GLOBALTRUST root certificate (https://github.com/advisories/GHSA-248v-346w-9cwc) - GHSA-g92j-qhmh-64v2 # Sentry's Python SDK unintentionally exposes environment variables to subprocesses (https://github.com/advisories/GHSA-g92j-qhmh-64v2) - GHSA-9mvj-f7w8-pvh2 # Bootstrap Cross-Site Scripting (XSS) vulnerability (https://github.com/advisories/GHSA-9mvj-f7w8-pvh2) + - GHSA-rrqc-c2jx-6jgv # Django allows enumeration of user e-mail addresses