Merge pull request Electron-Cash#2871 from jonas-lundqvist/audit_igno…

…re_requests audit: Ignore requests vulnerability
jonas-lundqvist · Jun 15, 2024 · 4d28c1a · 4d28c1a
2 parents 80a647d + 3b55baa
commit 4d28c1a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
@@ -29,9 +29,11 @@ jobs:
           # Will go away once setuptools, wheel and pip is bumped
           # GHSA-wj6h-64fc-37mp is only for P-256 curve which isn't used in bitcoin
           # GHSA-jjg7-2v4v-x38h is a minor issue that will be fixed on idna bump (>=3.7)
+          # GHSA-9wx4-h78v-vm56 is not applicable, fixed in requests >= 2.32.0
           ignore-vulns: |
             PYSEC-2022-43012
             PYSEC-2022-43017
             PYSEC-2023-228
             GHSA-wj6h-64fc-37mp
             GHSA-jjg7-2v4v-x38h
+            GHSA-9wx4-h78v-vm56