Ignore nancy issue for June internal patch release

Signed-off-by: Ambika Nair <ambiknai@in.ibm.com>
kubernetes-sigs · Jun 9, 2023 · d5c2c23 · d5c2c23
1 parent 564aa68
commit d5c2c23
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.nancy-ignore b/.nancy-ignore
@@ -1,3 +1,4 @@
 CVE-2020-8561 ## CWE-610: Externally Controlled Reference to a Resource in Another Sphere 
 CVE-2021-25740 ## CWE-610: Externally Controlled Reference to a Resource in Another Sphere 
 sonatype-2022-6522 ## 1 non-CVE vuln [pkg:golang/k8s.io/apiserver@v0.26.3]
+CVE-2021-25749 ## Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.Fix not available in community till now.