Merge pull request #205341 from dotlambda/poetry-insecure

poetry: mark insecure
This commit is contained in:
Robert Schütz 2022-12-09 10:07:06 -08:00 committed by GitHub
commit ecac8b9267
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -52,5 +52,8 @@ poetry2nix.mkPoetryApplication {
meta = with lib; {
inherit (python.meta) platforms;
maintainers = with maintainers; [ adisbladis jakewaksbaum ];
knownVulnerabilities = [
"CVE-2022-42966" # cleo version in poetry.lock is vulnerable
];
};
}