fix: CVE-2024-4985 version ranges (#116)

Co-authored-by: Becojo <[email protected]>
boostsecurityio · Jun 3, 2024 · ded1c51 · ded1c51
1 parent b7fe59b
commit ded1c51
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/opa/rego/external/build_platform.rego b/opa/rego/external/build_platform.rego
@@ -26,7 +26,12 @@ advisories = {
 		}],
 		"cwe_ids": ["CWE-303"],
 		"vulnerable_versions": [],
-		"vulnerable_version_ranges": ["<3.9.15","<3.10.12","<3.11.10","<3.12.4"],
+		"vulnerable_version_ranges": [
+			"<3.9.15",
+			">=3.10.0,<3.10.12",
+			">=3.11.0,<3.11.10",
+			">=3.12.0,<3.12.4",
+		],
 		"vulnerable_commit_shas": [],
 	}},
 }