From 6c05bfccd213a68419b7d3204da1f896b7e66427 Mon Sep 17 00:00:00 2001 From: Bug Magnet Date: Thu, 29 Aug 2024 09:47:18 +0200 Subject: [PATCH] Revert "Ignore rexml CVE-2024-43398" This reverts commit 489f6160a62847e576a7170e8dc32f1cf12e8886. --- ci/ios/upload-vm/osv-scanner.toml | 8 -------- ios/osv-scanner.toml | 8 -------- 2 files changed, 16 deletions(-) delete mode 100644 ci/ios/upload-vm/osv-scanner.toml delete mode 100644 ios/osv-scanner.toml diff --git a/ci/ios/upload-vm/osv-scanner.toml b/ci/ios/upload-vm/osv-scanner.toml deleted file mode 100644 index 1a26a0cfe2b1..000000000000 --- a/ci/ios/upload-vm/osv-scanner.toml +++ /dev/null @@ -1,8 +0,0 @@ -# See repository root `osv-scanner.toml` for instructions and rules for this file. - -# rexml: The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML -# that has many deep elements that have same local name attributes. -[[IgnoredVulns]] -id = "CVE-2024-43398" # GHSA-952p-6rrq-rcjv -ignoreUntil = 2024-11-23 -reason = "rexml only parses trusted input (responses from Apple's APIs) in this code" diff --git a/ios/osv-scanner.toml b/ios/osv-scanner.toml deleted file mode 100644 index 1a26a0cfe2b1..000000000000 --- a/ios/osv-scanner.toml +++ /dev/null @@ -1,8 +0,0 @@ -# See repository root `osv-scanner.toml` for instructions and rules for this file. - -# rexml: The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML -# that has many deep elements that have same local name attributes. -[[IgnoredVulns]] -id = "CVE-2024-43398" # GHSA-952p-6rrq-rcjv -ignoreUntil = 2024-11-23 -reason = "rexml only parses trusted input (responses from Apple's APIs) in this code"