Merge pull request #176420 from dotlambda/nixops-insecure

nixops: mark insecure

pkgs/development/python2-modules/pyjwt/default.nix

···
     description = "JSON Web Token implementation in Python";
     homepage = "https://github.com/jpadilla/pyjwt";
     license = licenses.mit;
+    knownVulnerabilities = [
+      "CVE-2022-29217"
+    ];
   };
 }

pkgs/tools/package-management/nixops/default.nix

···
   inherit (poetry2nix.mkPoetryPackages {
     projectDir = ./python-env;
     python = python2;
+    overrides = [
+      poetry2nix.defaultPoetryOverrides
+      (self: super: {
+        pyjwt = super.pyjwt.overridePythonAttrs (old: {
+          meta = old.meta // {
+            knownVulnerabilities = lib.optionals (lib.versionOlder old.version "2.4.0") [
+              "CVE-2022-29217"
+            ];
+          };
+        });
+      })
+    ];
   }) python;
   pythonPackages = python.pkgs;