update .govulncheck.yaml

.govulncheck.yaml

@@ -1 +1,43 @@
-ignored-vulnerabilities: []
+ignored-vulnerabilities:
+  # Panic when validating certificates with DSA public keys in crypto/x509
+  # Found in: crypto/[email protected]
+  # Fixed in: crypto/[email protected]
+  - id: GO-2025-4013
+    info: https://pkg.go.dev/vuln/GO-2025-4013
+    silence-until: 2025-12-03
+  # Lack of limit when parsing cookies can cause memory exhaustion in net/http
+  # Found in: net/[email protected]
+  # Fixed in: net/[email protected]
+  - id: GO-2025-4012
+    info: https://pkg.go.dev/vuln/GO-2025-4012
+    silence-until: 2025-12-03
+  # Parsing DER payload can cause memory exhaustion in encoding/asn1
+  # Found in: encoding/[email protected]
+  # Fixed in: encoding/[email protected]
+  - id: GO-2025-4011
+    info: https://pkg.go.dev/vuln/GO-2025-4011
+    silence-until: 2025-12-03
+  # Insufficient validation of bracketed IPv6 hostnames in net/url
+  # Found in: net/[email protected]
+  # Fixed in: net/[email protected]
+  - id: GO-2025-4010
+    info: https://pkg.go.dev/vuln/GO-2025-4010
+    silence-until: 2025-12-03
+  # Quadratic complexity when parsing some invalid inputs in encoding/pem
+  # Found in: encoding/[email protected]
+  # Fixed in: encoding/[email protected]
+  - id: GO-2025-4009
+    info: https://pkg.go.dev/vuln/GO-2025-4009
+    silence-until: 2025-12-03
+  # ALPN negotiation error contains attacker controlled information in crypto/tls
+  # Found in: crypto/[email protected]
+  # Fixed in: crypto/[email protected]
+  - id: GO-2025-4008
+    info: https://pkg.go.dev/vuln/GO-2025-4008
+    silence-until: 2025-12-03
+  # Quadratic complexity when checking name constraints in crypto/x509
+  # Found in: crypto/[email protected]
+  # Fixed in: crypto/[email protected]
+  - id: GO-2025-4007
+    info: https://pkg.go.dev/vuln/GO-2025-4007
+    silence-until: 2025-12-03