Ignore irrelevant python stdlib CVE

This commit is contained in:
Kovid Goyal 2026-02-03 14:48:30 +05:30
parent 9b35c1b535
commit 0267a02bb3
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C

View file

@ -215,6 +215,7 @@ IGNORED_DEPENDENCY_CVES = [
'CVE-2025-13837', # DoS in plistlib reading plist. We only use plistlib for writing
# python stdlib all these are erroneously marked as fixed in python 3.15
# when it hasnt even been released. Sigh.
'CVE-2026-1299',
'CVE-2026-0865',
'CVE-2025-15282',
'CVE-2026-0672',