From b1084c0b8a66d1279d72ff2094ebee0b42fa8c55 Mon Sep 17 00:00:00 2001 From: Hans-Christoph Steiner Date: Thu, 29 Aug 2024 14:31:36 +0200 Subject: [PATCH] WIP safety: make CVE-2024-6345 just a warning --- .safety-policy.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.safety-policy.yml b/.safety-policy.yml index 6324a25f..ac6892dd 100644 --- a/.safety-policy.yml +++ b/.safety-policy.yml @@ -29,3 +29,6 @@ security: 72132: reason: We get these packages from Debian, zipp is not used in production, and its only a DoS. expires: '2026-08-31' + 72236: + reason: setuptools comes from Debian + expires: '2026-08-31'