tjh.dev
wasm3: add many knownVulnerabilities
+13
pkgs/development/interpreters/wasm3/default.nix
+13
pkgs/development/interpreters/wasm3/default.nix
···
29
29
platforms = platforms.all;
30
30
maintainers = with maintainers; [ malbarbo ];
31
31
license = licenses.mit;
32
+
knownVulnerabilities = [
33
+
# wasm3 expects all wasm code to be pre-validated, any users
34
+
# should be aware that running unvalidated wasm will potentially
35
+
# lead to RCE until upstream have added a builtin validator
36
+
"CVE-2022-39974"
37
+
"CVE-2022-34529"
38
+
"CVE-2022-28990"
39
+
"CVE-2022-28966"
40
+
"CVE-2021-45947"
41
+
"CVE-2021-45946"
42
+
"CVE-2021-45929"
43
+
"CVE-2021-38592"
44
+
];
32
45
};
33
46
}