From e0a1e7ad9b830fb4fbbe18afda3094f02d055046 Mon Sep 17 00:00:00 2001 From: Luca Forstner Date: Fri, 13 Dec 2024 14:54:41 +0100 Subject: [PATCH] meta: Ignore `GHSA-gp8f-8m3g-qvj9` which is used in E2E tests (#14704) --- .github/dependency-review-config.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependency-review-config.yml b/.github/dependency-review-config.yml index 3becba39719e..1a8f76e430d1 100644 --- a/.github/dependency-review-config.yml +++ b/.github/dependency-review-config.yml @@ -7,3 +7,5 @@ allow-ghsas: - GHSA-fr5h-rqp8-mj6g # we need this for an E2E test for the minimum required version of Nuxt 3.7.0 - GHSA-v784-fjjh-f8r4 + # Next.js Cache poisoning - We require a vulnerable version for E2E testing + - GHSA-gp8f-8m3g-qvj9