From d58c255cb5b7392500108772c33f49aa26af2a4b Mon Sep 17 00:00:00 2001
From: Benjamin Sparks <b.sparks@alugha.com>
Date: Fri, 24 Oct 2025 20:38:57 +0200
Subject: [PATCH] cotton: mark as vulnerable to CVE-2025-62518

---
 pkgs/by-name/co/cotton/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/co/cotton/package.nix b/pkgs/by-name/co/cotton/package.nix
index 1d0de589da87..cfa45e587c4f 100644
--- a/pkgs/by-name/co/cotton/package.nix
+++ b/pkgs/by-name/co/cotton/package.nix
@@ -26,5 +26,9 @@ rustPlatform.buildRustPackage {
       dit7ya
       figsoda
     ];
+
+    knownVulnerabilities = [
+      "'cotton' is vulnerable to CVE-2025-62518"
+    ];
   };
 }