Fix CVE-2024-45296

Suppress CVE-2023-29827 per mde/ejs#720
finos · Sep 22, 2024 · 1e1d6b3 · 1e1d6b3
1 parent 6fc9c2c
commit 1e1d6b3
Show file tree

Hide file tree

Showing 3 changed files with 95 additions and 19 deletions.
diff --git a/.github/node-cve-ignore-list.xml b/.github/node-cve-ignore-list.xml
@@ -35,4 +35,11 @@
         <packageUrl regex="true">^pkg:npm/async@.*$</packageUrl>
         <vulnerabilityName>CVE-2024-39249</vulnerabilityName>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: ejs:3.1.10
+        ]]></notes>
+        <packageUrl regex="true">^pkg:npm/ejs@.*$</packageUrl>
+        <vulnerabilityName>CVE-2023-29827</vulnerabilityName>
+    </suppress>
 </suppressions>