From 5408a44c6d115aa65866224f6409e7b02b0f5eae Mon Sep 17 00:00:00 2001
From: dramforever <dramforever@live.com>
Date: Sat, 26 Apr 2025 17:54:59 +0800
Subject: [PATCH] clash-verge-rev: mark as insecure

At the request of package maintainer @Bot-wxt1221.

Package affected by an yet-undisclosed but credible LPE vulnerability,
marking as insecure.

See https://github.com/clash-verge-rev/clash-verge-rev/issues/3428
---
 pkgs/by-name/cl/clash-verge-rev/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/cl/clash-verge-rev/package.nix b/pkgs/by-name/cl/clash-verge-rev/package.nix
index 4f0b282a7982..fd5eec1ac7cd 100644
--- a/pkgs/by-name/cl/clash-verge-rev/package.nix
+++ b/pkgs/by-name/cl/clash-verge-rev/package.nix
@@ -80,6 +80,9 @@ let
       bot-wxt1221
     ];
     platforms = lib.platforms.linux;
+    knownVulnerabilities = [
+      "https://github.com/clash-verge-rev/clash-verge-rev/issues/3428"
+    ];
   };
 in
 stdenv.mkDerivation {