File tree Expand file tree Collapse file tree 1 file changed +9
-1
lines changed
Expand file tree Collapse file tree 1 file changed +9
-1
lines changed Original file line number Diff line number Diff line change 22 // $schema provides code completion hints to IDEs.
33 "$schema" : " https://github.com/IBM/audit-ci/raw/main/docs/schema.json" ,
44 "low" : true ,
5- "allowlist" : []
5+ "allowlist" : [
6+ // GHSA-67mh-4wv8-2f99 allows malicious websites to read localhost files while dev server runs.
7+ // We use VitePress for documentation build and all the information is already publicly available on GitHub Pages.
8+ // Exposure during local development doesn't leak confidential information.
9+ // This issue affects only the dev server. Production/CI builds are unaffected.
10+ //
11+ // Fix is available in VitePress 2.x with esbuild v0.25.x, but no stable release yet (only alpha).
12+ " GHSA-67mh-4wv8-2f99|vitepress>vite>esbuild"
13+ ]
614}
You can’t perform that action at this time.
0 commit comments