poetry: mark insecure

The version of cleo in poetry.lock (1.0.0a5) is vulnerable to
CVE-2022-42966.
This commit is contained in:
Robert Schütz 2022-06-04 16:44:42 +00:00
parent c2e9f0550a
commit d1bdaa9a99

View File

@ -52,5 +52,8 @@ poetry2nix.mkPoetryApplication {
meta = with lib; {
inherit (python.meta) platforms;
maintainers = with maintainers; [ adisbladis jakewaksbaum ];
knownVulnerabilities = [
"CVE-2022-42966" # cleo version in poetry.lock is vulnerable
];
};
}