picosnitch: mark as vulnerable

2024-08-22 03:35:18 +01:00 · 2024-08-22 03:35:18 +01:00 · 98f36e5c98
commit 98f36e5c98
parent 20eb4bcca8
1 changed files with 3 additions and 0 deletions
--- a/pkgs/tools/networking/picosnitch/default.nix
+++ b/pkgs/tools/networking/picosnitch/default.nix
@ -39,5 +39,8 @@ python3.pkgs.buildPythonApplication rec {
    license = licenses.gpl3Plus;
    maintainers = [ maintainers.elesiuta ];
    platforms = platforms.linux;
+    knownVulnerabilities = [
+      "Allows an unprivileged user to write to arbitrary files as root; see https://github.com/elesiuta/picosnitch/issues/40"
+    ];
  };
 }