Fix CVE-2024-45296 (#397)

finos · Sep 22, 2024 · 4281f8e · 4281f8e
1 parent 5d8e328
commit 4281f8e
Show file tree

Hide file tree

Showing 3 changed files with 95 additions and 19 deletions.
diff --git a/.github/node-cve-ignore-list.xml b/.github/node-cve-ignore-list.xml
@@ -35,4 +35,11 @@
         <packageUrl regex="true">^pkg:npm/async@.*$</packageUrl>
         <vulnerabilityName>CVE-2024-39249</vulnerabilityName>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: ejs:3.1.10
+        ]]></notes>
+        <packageUrl regex="true">^pkg:npm/ejs@.*$</packageUrl>
+        <vulnerabilityName>CVE-2023-29827</vulnerabilityName>
+    </suppress>
 </suppressions>