poetry: mark insecure

The version of cleo in poetry.lock (1.0.0a5) is vulnerable to CVE-2022-42966.
2022-12-09 09:45:59 -08:00
parent c2e9f0550a
commit d1bdaa9a99
1 changed files with 3 additions and 0 deletions
@@ -52,5 +52,8 @@ poetry2nix.mkPoetryApplication {
  meta = with lib; {
    inherit (python.meta) platforms;
    maintainers = with maintainers; [ adisbladis jakewaksbaum ];
+    knownVulnerabilities = [
+      "CVE-2022-42966"  # cleo version in poetry.lock is vulnerable
+    ];
  };
 }