We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 92c89bb commit f2e2289Copy full SHA for f2e2289
WORKSPACE.yaml
@@ -34,7 +34,7 @@ provenance:
34
sbom:
35
enabled: true
36
ignoreVulnerabilities:
37
- - vulnerability: CVE-2022-33171
+ - vulnerability: GHSA-fx4w-v43j-vc45
38
reason: |
39
This vulnerability in TypeORM's findOne / findOneOrFail functions can improperly interpret a crafted JSON object
40
and concatenate it into raw SQL, potentially allowing SQL injection attacks.
0 commit comments