Merge pull request #759 from spaze/patch-1

Ignore bogus nette/database GHSA/CVE
Roave · Dec 17, 2024 · 7302998 · 7302998
2 parents 6b3921e + 3cc8751
commit 7302998
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/Roave/SecurityAdvisories/AdvisorySources/GetAdvisoriesFromGithubApi.php b/src/Roave/SecurityAdvisories/AdvisorySources/GetAdvisoriesFromGithubApi.php
@@ -44,6 +44,7 @@ final class GetAdvisoriesFromGithubApi implements GetAdvisories
         'GHSA-cg28-v4wq-whv5', // @see https://phpc.social/@wouterj/113588554019692959
         // @see https://github.com/github/advisory-database/pull/5047, advisory is for the tarball version only
         'GHSA-j5g2-q29x-cw3h',
+        'GHSA-f626-677r-j5vq', // @see https://github.com/nette/database/issues/314
     ];
     private const GRAPHQL_QUERY      = 'query {
             securityVulnerabilities(ecosystem: COMPOSER, first: 100 %s) {