mirror of
https://github.com/f-droid/fdroidserver.git
synced 2025-11-04 14:30:30 +03:00
ac2a3896aa
F-Droid server doesn't fetch pip dependencies directly from mercurial/hg repositories. So https://data.safetycli.com/v/62044/f17/ is not affecting us. Hence we can ingore it.
19 lines
718 B
YAML
19 lines
718 B
YAML
---
|
|
|
|
security:
|
|
ignore-vulnerabilities:
|
|
52495:
|
|
reason: setuptools comes from Debian
|
|
expires: '2025-01-31'
|
|
60350:
|
|
reason: GitPython comes from Debian https://security-tracker.debian.org/tracker/CVE-2023-40267
|
|
expires: '2025-01-31'
|
|
60789:
|
|
reason: GitPython comes from Debian https://security-tracker.debian.org/tracker/CVE-2023-40590
|
|
expires: '2025-01-31'
|
|
60841:
|
|
reason: GitPython comes from Debian https://security-tracker.debian.org/tracker/CVE-2023-41040
|
|
expires: '2025-01-31'
|
|
62044:
|
|
reason: "F-Droid doesn't fetch pip dependencies directly from hg/mercurial repositories: https://data.safetycli.com/v/62044/f17/"
|
|
expires: '2025-01-31'
|