metamask-extension/.iyarc

# improved-yarn-audit advisory exclusions
GHSA-257v-vj4p-3w2h

# yarn berry's `yarn npm audit` script reports the following vulnerability but
# it is a false positive. The offending version of 'ws' that is installed is
# 7.1.1 and is included only via remote-redux-devtools which is a devDependency
GHSA-6fc8-4gx4-v693

# request library is subject to SSRF.
# addressed by temporary patch in .yarn/patches/request-npm-2.88.2-f4a57c72c4.patch
GHSA-p8p7-x288-28g6
Feature/remove bitmask (#14489) * remove bitmask * add --fail-on-missing-exclusions * add .iyarc 2022-04-21 23:58:57 +02:00			`# improved-yarn-audit advisory exclusions`
			`GHSA-257v-vj4p-3w2h`
upgrade yarn to version 3 (#16232) Co-authored-by: Mark Stacey <markjstacey@gmail.com> Co-authored-by: ricky <ricky.miller@gmail.com> Co-authored-by: Elliot Winkler <elliot.winkler@gmail.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: legobt <6wbvkn0j@anonaddy.me> Co-authored-by: Pedro Figueiredo <pedro.figueiredo@consensys.net> 2022-12-08 17:38:04 +01:00
			# yarn berry's `yarn npm audit` script reports the following vulnerability but
			`# it is a false positive. The offending version of 'ws' that is installed is`
			`# 7.1.1 and is included only via remote-redux-devtools which is a devDependency`
			`GHSA-6fc8-4gx4-v693`
fix audit failure (#17079) 2023-01-04 18:29:37 +01:00
security: patch request for CVE-2023-28155 (#18208) * security: patch request for CVE-2023-28155 GHSA-p8p7-x288-28g6 Ported from https://github.com/request/request/pull/3444 * add iyarc exclusion 2023-03-17 15:29:39 +01:00			`# request library is subject to SSRF.`
			`# addressed by temporary patch in .yarn/patches/request-npm-2.88.2-f4a57c72c4.patch`
			`GHSA-p8p7-x288-28g6`