From 7f4cb6e5cb1d5f7a49c154a2faf1d6987cbf3d05 Mon Sep 17 00:00:00 2001
From: Claudio Bley <claudio.bley@gmail.com>
Date: Tue, 14 Jan 2025 21:25:33 +0100
Subject: [PATCH] yubikey-manager-qt: mark as insecure

The project is not under development anymore, Yubico Authenticator is recommended instead.
---
 pkgs/tools/misc/yubikey-manager-qt/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/tools/misc/yubikey-manager-qt/default.nix b/pkgs/tools/misc/yubikey-manager-qt/default.nix
index 1c2fe27433e3..5dc4d4718e2b 100644
--- a/pkgs/tools/misc/yubikey-manager-qt/default.nix
+++ b/pkgs/tools/misc/yubikey-manager-qt/default.nix
@@ -87,6 +87,9 @@ mkDerivation rec {
   meta = with lib; {
     description = "Cross-platform application for configuring any YubiKey over all USB interfaces";
     homepage = "https://developers.yubico.com/yubikey-manager-qt/";
+    knownVulnerabilities = [
+      "Yubico has announced the End of Life of YubiKey Manager QT. Upstream recommends yubioath-flutter to configure a YubiKey. yubikey-manager-qt will be dropped after NixOS 25.05."
+    ];
     license = licenses.bsd2;
     maintainers = [ maintainers.cbley ];
     mainProgram = "ykman-gui";