Bump dependency for CVE

This commit is contained in:
Kovid Goyal 2026-02-07 14:41:17 +05:30
parent 07a9f2bcaa
commit 3839dcc082
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
2 changed files with 2 additions and 4 deletions

View file

@ -224,8 +224,6 @@ IGNORED_DEPENDENCY_CVES = [
'CVE-2025-15367',
'CVE-2025-12781',
'CVE-2025-11468',
# glib
'CVE-2025-4056', # Only affects Windows, on which we dont run
# github.com/nwaples/rardecode/v2
'CVE-2025-11579', # rardecode is version 2.2.1, not vulnerable
]