Ignore GO-2024-3105, GO-2024-3107 and GO-2024-3106

mullvad · Sep 18, 2024 · 56b5327 · 56b5327
1 parent 54e0614
commit 56b5327
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/wireguard-go-rs/libwg/osv-scanner.toml b/wireguard-go-rs/libwg/osv-scanner.toml
@@ -0,0 +1,18 @@
+
+# Stack exhaustion in Decoder.Decode in encoding/gob
+[[IgnoredVulns]]
+id = "CVE-2024-34156" # GO-2024-3106
+ignoreUntil = 2024-12-18
+reason = "wireguard-go does not use the affected code"
+
+# Stack exhaustion in Parse in go/build/constraint
+[[IgnoredVulns]]
+id = "CVE-2024-34158" # GO-2024-3107
+ignoreUntil = 2024-12-18
+reason = "wireguard-go does not use the affected code"
+
+# Stack exhaustion in all Parse functions in go/parser
+[[IgnoredVulns]]
+id = "CVE-2024-34155" # GO-2024-3105
+ignoreUntil = 2024-12-18
+reason = "wireguard-go does not use the affected code"