mirror of
https://github.com/kovidgoyal/kitty
synced 2026-06-06 01:05:48 +02:00
Ignore CVE-2025-13836
We dont care about this DoS enough, so ignore until a new version of python 3.12 s released with the fix. Not updating past Python 3.12 for this DoS.
This commit is contained in:
1
.github/workflows/ci.py
vendored
1
.github/workflows/ci.py
vendored
@@ -220,6 +220,7 @@ IGNORED_DEPENDENCY_CVES = [
|
||||
# Python stdlib
|
||||
'CVE-2025-8194', # DoS in tarfile
|
||||
'CVE-2025-6069', # DoS in HTMLParser
|
||||
'CVE-2025-13836', # DoS in http client reading from malicious server
|
||||
# glib
|
||||
'CVE-2025-4056', # Only affects Windows, on which we dont run
|
||||
# github.com/nwaples/rardecode/v2
|
||||
|
||||
Reference in New Issue
Block a user