mongosh/.snyk at main · wekan/mongosh

Repository navigation

# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.

version: v1.25.0

# ignores vulnerabilities until expiry date; change duration by modifying expiry date

ignore:

SNYK-JS-BASICFTP-20419408:

- '*':

reason: "ReDoS in basic-ftp Client.list() requires connecting to a malicious FTP server; basic-ftp is only reachable via get-uri's ftp: handler (pac-proxy-agent), which can already slow down mongosh connections arbitrarily"

expires: 2027-04-06T00:00:00.000Z

created: 2026-10-06T00:00:00.000Z

SNYK-JS-JSBEAUTIFY-20883334:

- '*':

reason: "js-beautify only operates on trusted user input in mongosh"

expires: 2027-04-06T00:00:00.000Z

created: 2026-10-23T00:00:00.000Z

patch: {}

FilesExpand file tree

.snyk

Latest commit

History

.snyk

File metadata and controls