|
1 | 1 | # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
2 |
| -version: v1.25.0 |
| 2 | +version: v1.25.1 |
3 | 3 | # ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
4 | 4 | ignore:
|
5 | 5 | SNYK-JS-AGGRIDCOMMUNITY-1932011:
|
6 | 6 | - '*':
|
7 | 7 | reason: >-
|
8 | 8 | Not applicable as we do not use a valueFormatter or cellRenderer
|
9 | 9 | function
|
10 |
| - expires: 2024-11-15T18:27:24.346Z |
| 10 | + expires: 2025-09-17T13:05:57.065Z |
11 | 11 | created: 2024-01-18T18:27:24.353Z
|
12 |
| - SNYK-JS-AXIOS-6032459: |
13 |
| - - '*': |
14 |
| - reason: Not applicable to axios usage inside node-analytics package |
15 |
| - expires: 2024-10-30T10:18:43.435Z |
16 |
| - created: 2023-10-30T10:18:43.435Z |
17 |
| - SNYK-JS-ELECTRON-7443355: |
18 |
| - - '*': |
19 |
| - reason: >- |
20 |
| - Not applicable as we do not open / allow opening random webpages in |
21 |
| - our Electron app. |
22 |
| - expires: 2024-07-25T12:41:36.996Z |
23 |
| - created: 2024-07-19T12:41:36.999Z |
24 | 12 | SNYK-JS-AGGRIDCOMMUNITY-7414157:
|
25 | 13 | - '*':
|
26 | 14 | reason: >-
|
27 | 15 | Not applicable as we don't use ag-grid utils and the library never
|
28 | 16 | passes user input directly to the merge function
|
29 | 17 | expires: 2025-09-17T13:05:57.065Z
|
30 | 18 | created: 2024-09-17T13:05:57.071Z
|
| 19 | + SNYK-JS-ELECTRON-8642944: |
| 20 | + - '*': |
| 21 | + reason: >- |
| 22 | + Fixed in https://github.com/electron/electron/releases/tag/v32.3.0 |
| 23 | + expires: 2025-03-26T09:48:32.235Z |
| 24 | + created: 2025-01-27T09:48:32.246Z |
| 25 | + SNYK-JS-ELECTRON-8642948: |
| 26 | + - '*': |
| 27 | + reason: >- |
| 28 | + Fixed in https://github.com/electron/electron/releases/tag/v32.3.0 |
| 29 | + expires: 2025-03-26T09:49:13.962Z |
| 30 | + created: 2025-01-27T09:49:13.968Z |
| 31 | + SNYK-JS-ELECTRON-8097217: |
| 32 | + - '*': |
| 33 | + reason: >- |
| 34 | + Not applicable: requires attacker to inject and execute custom |
| 35 | + javascript on the page AND experimental api to be enabled (see |
| 36 | + https://issues.chromium.org/issues/365376497) |
| 37 | + expires: 2025-03-26T09:49:21.587Z |
| 38 | + created: 2025-01-27T09:49:21.596Z |
| 39 | + SNYK-JS-ELECTRON-8604283: |
| 40 | + - '*': |
| 41 | + reason: >- |
| 42 | + Fixed in https://github.com/electron/electron/releases/tag/v32.3.0 |
| 43 | + expires: 2025-03-26T09:49:31.423Z |
| 44 | + created: 2025-01-27T09:49:31.431Z |
| 45 | + SNYK-JS-ELECTRON-8642946: |
| 46 | + - '*': |
| 47 | + reason: >- |
| 48 | + Fixed in https://github.com/electron/electron/releases/tag/v32.3.0 |
| 49 | + expires: 2025-02-26T09:49:38.738Z |
| 50 | + created: 2025-01-27T09:49:38.746Z |
31 | 51 | # patches apply the minimum changes required to fix a vulnerability
|
32 | 52 | patch:
|
33 | 53 | 'npm:ms:20170412':
|
|
0 commit comments