mirror of
https://github.com/keycloak/keycloak.git
synced 2026-01-09 15:02:05 -03:30
Update snyk ignore to display warnings from Netty
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
This commit is contained in:
parent
cd8e0fd333
commit
0e9b42a0af
13
.github/snyk/.snyk
vendored
13
.github/snyk/.snyk
vendored
@ -15,19 +15,6 @@ ignore:
|
||||
The Keycloak services module is not affected by CVE-2021-3461 anymore,
|
||||
the issue was fixed on Keycloak 14.0.0 last year. More details:
|
||||
- https://issues.redhat.com/browse/KEYCLOAK-17495
|
||||
SNYK-JAVA-IONETTY-1042268:
|
||||
- "*":
|
||||
reason: >
|
||||
There is no fixed version for io.netty:netty-handler. More details:
|
||||
- https://github.com/netty/netty/issues/10806
|
||||
- https://github.com/netty/netty/issues/8537
|
||||
- https://github.com/netty/netty/issues/9930
|
||||
- https://github.com/netty/netty/issues/10362
|
||||
Netty Handler is a transitive dependency coming from Quarkus,
|
||||
according to the Netty team, the fix should be available on Netty 5.
|
||||
The expiry date was set as a reminder for us to upgrade, once they
|
||||
provide the fix.
|
||||
expires: 2024-06-31T00:00:00.000Z
|
||||
SNYK-JAVA-ORGKEYCLOAK-1658295:
|
||||
- "*":
|
||||
reason: >
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user