nancy: ignore go-retryablehttp@v0.7.4 in .nancy-ignore (#2559)

bnb-chain · Jul 2, 2024 · 51e27f9 · 51e27f9
1 parent f1a85ec
commit 51e27f9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.nancy-ignore b/.nancy-ignore
@@ -1 +1,2 @@
 CVE-2024-34478 # "CWE-754: Improper Check for Unusual or Exceptional Conditions." This vulnerability is BTC only, BSC does not have the issue.
+CVE-2024-6104 # "CWE-532: Information Exposure Through Log Files" This is caused by the vulnerabilities go-retryablehttp@v0.7.4, it is only used in cmd devp2p, impact is limited. will upgrade to v0.7.7 later