Skip to content

Commit 0eeed16

Browse files
committed
ignore nancy warning
1 parent 83e4327 commit 0eeed16

File tree

1 file changed

+4
-14
lines changed

1 file changed

+4
-14
lines changed

backend/.nancy-ignore

Lines changed: 4 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,41 +1,31 @@
11
# If you need to ignore any of nancy's warnings add them
2-
32
# here with a reference to the package/version that
4-
53
# triggers them and rational for ignoring it.
6-
74
# pkg:golang/github.com/coreos/[email protected]
8-
95
# etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation
10-
116
CVE-2020-15115
127

138
# pkg:golang/github.com/coreos/[email protected]
14-
159
# In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records
16-
1710
CVE-2020-15136
1811

1912
# pkg:golang/github.com/coreos/[email protected]
20-
2113
# In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access
22-
2314
CVE-2020-15114
2415

2516
# pkg:golang/github.com/gorilla/[email protected]
26-
2717
# Integer Overflow or Wraparound
28-
2918
CWE-190
3019

3120
# jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrict...
32-
3321
CVE-2020-26160
3422

3523
# https://ossindex.sonatype.org/vulnerability/sonatype-2021-1485
36-
3724
sonatype-2021-1485
3825

3926
# CWE-770: Allocation of Resources Without Limits or Throttling
40-
4127
CVE-2022-41717
28+
CVE-2022-41723
29+
30+
# CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
31+
CVE-2022-41723

0 commit comments

Comments
 (0)