[Backport release-25.05] lima: add meta.knownVulnerabilities (#459225)

This commit is contained in:
Aleksana 2025-11-09 02:31:17 +00:00 committed by GitHub
commit 67ca06296a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -91,5 +91,13 @@ buildGoModule rec {
changelog = "https://github.com/lima-vm/lima/releases/tag/v${version}";
license = licenses.asl20;
maintainers = with maintainers; [ anhduy ];
knownVulnerabilities = [
"There are some CVEs in the nerdctl dependency. Has been fixed in Nixpkgs unstable."
"CVE-2024-25621"
"CVE-2025-64329"
"CVE-2025-31133"
"CVE-2025-52565"
"CVE-2025-52881"
];
};
}