dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #192915 from risicle/ris-wasm3-known-vulnerabilities

Browse Source
This commit is contained in:
Sandro 2022-10-01 19:25:34 +02:00 committed by GitHub
commit b87d269a61
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
pkgs/development/interpreters/wasm3/default.nix
View File

@ -29,5 +29,18 @@ stdenv.mkDerivation rec {
platforms = platforms.all;
maintainers = with maintainers; [ malbarbo ];
license = licenses.mit;
knownVulnerabilities = [
# wasm3 expects all wasm code to be pre-validated, any users
# should be aware that running unvalidated wasm will potentially
# lead to RCE until upstream have added a builtin validator
"CVE-2022-39974"
"CVE-2022-34529"
"CVE-2022-28990"
"CVE-2022-28966"
"CVE-2021-45947"
"CVE-2021-45946"
"CVE-2021-45929"
"CVE-2021-38592"
];
};
}