Commit 5408a44c authored by dramforever's avatar dramforever
Browse files

clash-verge-rev: mark as insecure 

At the request of package maintainer @Bot-wxt1221.

Package affected by an yet-undisclosed but credible LPE vulnerability,
marking as insecure.

See https://github.com/clash-verge-rev/clash-verge-rev/issues/3428
parent 1f4a897b

pkgs/by-name/cl/clash-verge-rev/package.nix

+3 −0
Original line number Diff line number Diff line
@@ -80,6 +80,9 @@ let 
      bot-wxt1221

    ];

    platforms = lib.platforms.linux;

    knownVulnerabilities = [

      "https://github.com/clash-verge-rev/clash-verge-rev/issues/3428"

    ];

  };

in

stdenv.mkDerivation {