ayo/kitty
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ignore CVE-2025-13836

Browse source 
We dont care about this DoS enough, so ignore until a new version of
python 3.12 s released with the fix. Not updating past Python 3.12 for
this DoS.
This commit is contained in:
Kovid Goyal 2025-12-04 15:10:26 +05:30
parent 3352dba735
commit d87ba95d9c
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.github/workflows/ci.py vendored
View file

@ -220,6 +220,7 @@ def install_grype() -> str:
# Python stdlib
'CVE-2025-8194', # DoS in tarfile
'CVE-2025-6069', # DoS in HTMLParser
'CVE-2025-13836', # DoS in http client reading from malicious server
# glib
'CVE-2025-4056', # Only affects Windows, on which we dont run
# github.com/nwaples/rardecode/v2