py3-pip nak advisory CVE-2018-20225

Same reason as py3.12-pip and below this is a contested advisory Signed-off-by: Pris Nasrat <[email protected]>
wolfi-dev · Jun 20, 2024 · c683eff · c683eff
1 parent b0a293e
commit c683eff
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/py3-pip.advisories.yaml b/py3-pip.advisories.yaml
@@ -9,6 +9,11 @@ advisories:
       - CVE-2018-20225
       - GHSA-7p5p-7qq5-cc86
     events:
+      - timestamp: 2024-06-20T14:20:25Z
+        type: false-positive-determination
+        data:
+          type: vulnerability-record-analysis-contested
+          note: This vulnerability is disputed, and the consensus in the security community is that this is intended behavior, not a security flaw.
       - timestamp: 2024-06-18T13:07:02Z
         type: detection
         data: