From faf77b348e52338cca22852393feedc7b550e9db Mon Sep 17 00:00:00 2001 From: Diego Ximenes Date: Wed, 18 Dec 2024 09:20:29 -0300 Subject: [PATCH] Updates audit-ci.jsonc --- audit-ci.jsonc | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/audit-ci.jsonc b/audit-ci.jsonc index bc17767fb..79636a73e 100644 --- a/audit-ci.jsonc +++ b/audit-ci.jsonc @@ -65,6 +65,16 @@ // Server-Side Request Forgery in axios "GHSA-8hc4-vh64-cxmj", // Regular Expression Denial of Service (ReDoS) in micromatch - "GHSA-952p-6rrq-rcjv" + "GHSA-952p-6rrq-rcjv", + // cookie accepts cookie name, path, and domain with out of bounds characters + "GHSA-pxg6-pf52-xh8x", + // Elliptic's verify function omits uniqueness validation + "GHSA-434g-2637-qmqr", + // Valid ECDSA signatures erroneously rejected in Elliptic + "GHSA-fc9h-whq2-v747", + // secp256k1-node allows private key extraction over ECDH + "GHSA-584q-6j8j-r5pm", + // Regular Expression Denial of Service (ReDoS) in cross-spawn + "GHSA-3xgq-45jj-v275" ] }