Skip to content

Commit 47d6ad9

Browse files
authored
chore(deps): add ignores for some vulns reported by snyk COMPASS-8871 (#6662)
chore(deps): add ignores for some vulns reported by snyk
1 parent 148d6e0 commit 47d6ad9

File tree

1 file changed

+34
-14
lines changed

1 file changed

+34
-14
lines changed

.snyk

Lines changed: 34 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,33 +1,53 @@
11
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2-
version: v1.25.0
2+
version: v1.25.1
33
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
44
ignore:
55
SNYK-JS-AGGRIDCOMMUNITY-1932011:
66
- '*':
77
reason: >-
88
Not applicable as we do not use a valueFormatter or cellRenderer
99
function
10-
expires: 2024-11-15T18:27:24.346Z
10+
expires: 2025-09-17T13:05:57.065Z
1111
created: 2024-01-18T18:27:24.353Z
12-
SNYK-JS-AXIOS-6032459:
13-
- '*':
14-
reason: Not applicable to axios usage inside node-analytics package
15-
expires: 2024-10-30T10:18:43.435Z
16-
created: 2023-10-30T10:18:43.435Z
17-
SNYK-JS-ELECTRON-7443355:
18-
- '*':
19-
reason: >-
20-
Not applicable as we do not open / allow opening random webpages in
21-
our Electron app.
22-
expires: 2024-07-25T12:41:36.996Z
23-
created: 2024-07-19T12:41:36.999Z
2412
SNYK-JS-AGGRIDCOMMUNITY-7414157:
2513
- '*':
2614
reason: >-
2715
Not applicable as we don't use ag-grid utils and the library never
2816
passes user input directly to the merge function
2917
expires: 2025-09-17T13:05:57.065Z
3018
created: 2024-09-17T13:05:57.071Z
19+
SNYK-JS-ELECTRON-8642944:
20+
- '*':
21+
reason: >-
22+
Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
23+
expires: 2025-03-26T09:48:32.235Z
24+
created: 2025-01-27T09:48:32.246Z
25+
SNYK-JS-ELECTRON-8642948:
26+
- '*':
27+
reason: >-
28+
Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
29+
expires: 2025-03-26T09:49:13.962Z
30+
created: 2025-01-27T09:49:13.968Z
31+
SNYK-JS-ELECTRON-8097217:
32+
- '*':
33+
reason: >-
34+
Not applicable: requires attacker to inject and execute custom
35+
javascript on the page AND experimental api to be enabled (see
36+
https://issues.chromium.org/issues/365376497)
37+
expires: 2025-03-26T09:49:21.587Z
38+
created: 2025-01-27T09:49:21.596Z
39+
SNYK-JS-ELECTRON-8604283:
40+
- '*':
41+
reason: >-
42+
Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
43+
expires: 2025-03-26T09:49:31.423Z
44+
created: 2025-01-27T09:49:31.431Z
45+
SNYK-JS-ELECTRON-8642946:
46+
- '*':
47+
reason: >-
48+
Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
49+
expires: 2025-02-26T09:49:38.738Z
50+
created: 2025-01-27T09:49:38.746Z
3151
# patches apply the minimum changes required to fix a vulnerability
3252
patch:
3353
'npm:ms:20170412':

0 commit comments

Comments
 (0)