Ignore inapplicable CVEs
Some checks failed
CI / Linux (python=3.14 cc=clang sanitize=1) (push) Has been cancelled
CI / Linux (python=3.12 cc=gcc sanitize=0) (push) Has been cancelled
CI / Linux (python=3.13 cc=gcc sanitize=1) (push) Has been cancelled
CI / Linux package (push) Has been cancelled
CI / Bundle test (macos-latest) (push) Has been cancelled
CI / Bundle test (ubuntu-latest) (push) Has been cancelled
CI / macOS Brew (push) Has been cancelled
CI / Test ./dev.sh and benchmark (push) Has been cancelled
CodeQL / CodeQL-Build (actions, ubuntu-latest) (push) Has been cancelled
CodeQL / CodeQL-Build (c, macos-latest) (push) Has been cancelled
CodeQL / CodeQL-Build (c, ubuntu-latest) (push) Has been cancelled
CodeQL / CodeQL-Build (go, ubuntu-latest) (push) Has been cancelled
CodeQL / CodeQL-Build (python, ubuntu-latest) (push) Has been cancelled
Depscan / Scan dependencies for vulnerabilities (push) Has been cancelled

This commit is contained in:
Kovid Goyal 2026-09-11 07:02:32 +05:30
parent 69bf7e2fc5
commit 9710eb4460
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C

View file

@ -286,6 +286,9 @@ IGNORED_DEPENDENCY_CVES = [
'CVE-2026-11940', # tarfile, unused
'CVE-2026-11972', # tarfile, unused
'CVE-2026-0864', # configparser unused
'CVE-2026-17084', # idna encoding, unused
'CVE-2026-15806', # HTTPPasswordMgr unused
'CVE-2026-15310', # DoS in unzip
# github.com/nwaples/rardecode/v2
'CVE-2025-11579', # rardecode is version 2.2.1, not vulnerable
'CVE-2026-2673', # openssl fix not released