From 8fda212c48eaced6d695b1092985834f545b69da Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Mon, 13 Sep 2021 12:20:10 +0200 Subject: [PATCH] cli: ignore some prototype pollution vulnerabilities Signed-off-by: Patrik Oldsberg --- packages/cli/.snyk | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/packages/cli/.snyk b/packages/cli/.snyk index 119cb19e7e..612b4b0525 100644 --- a/packages/cli/.snyk +++ b/packages/cli/.snyk @@ -55,4 +55,16 @@ ignore: reason: Developer tools are not a valid target for ReDoS attacks expires: 2022-03-06T17:18:55.019Z created: 2021-09-06T17:18:55.027Z + + SNYK-JS-IMMER-1540542: + - '*': + reason: Prototype pollution is not an effective attack against a CLI as it already executes arbitrary code + expires: 2022-03-06T17:18:55.019Z + created: 2021-09-06T17:18:55.027Z + + SNYK-JS-SETVALUE-1540541: + - '*': + reason: Prototype pollution is not an effective attack against a CLI as it already executes arbitrary code + expires: 2022-03-06T17:18:55.019Z + created: 2021-09-06T17:18:55.027Z patch: {}