Silent OSV on quic-go bump

There is nothing we can do on our and, we have to wait for Caddy releases: caddyserver/caddy#6210 Silent for a week to keep it under scrutinity. Part of: request #37550 github.com/quic-go/quic-go 0.40.1 -> 0.42 Change-Id: Idf6d1af4ba83b0a1941c2a7c67e2bf42773058f4
Enalean · Apr 3, 2024 · d5a09fc · d5a09fc
1 parent 01b5d33
commit d5a09fc
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/tools/utils/osv-scanner/config.toml b/tools/utils/osv-scanner/config.toml
@@ -86,3 +86,10 @@ reason = "@vue/component-compiler-utils will be removed when the Vue 2 migration
 id = "GO-2024-2631" # CVE-2024-28180
 reason = "No JWE in Tuleap use case and upstreams need to sort out the issue in their dep trees."
 ignoreUntil = 2024-05-19
+
+## github.com/quic-go/quic-go
+[[IgnoredVulns]]
+id = "GHSA-c33x-xqrf-c478" # CVE-2024-22189
+# https://github.com/caddyserver/caddy/issues/6210
+reason = "Wait for new Caddy release"
+ignoreUntil = 2024-04-10