Bump dependency for CVE
This commit is contained in:
2
.github/workflows/ci.py
vendored
2
.github/workflows/ci.py
vendored
@@ -224,8 +224,6 @@ IGNORED_DEPENDENCY_CVES = [
|
||||
'CVE-2025-15367',
|
||||
'CVE-2025-12781',
|
||||
'CVE-2025-11468',
|
||||
# glib
|
||||
'CVE-2025-4056', # Only affects Windows, on which we dont run
|
||||
# github.com/nwaples/rardecode/v2
|
||||
'CVE-2025-11579', # rardecode is version 2.2.1, not vulnerable
|
||||
]
|
||||
|
||||
Reference in New Issue
Block a user