chore: update audit-ci.jsonc

OffchainLabs · Feb 14, 2025 · f006bf4 · f006bf4
1 parent aadde61
commit f006bf4
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/audit-ci.jsonc b/audit-ci.jsonc
@@ -101,6 +101,12 @@
     // from: @arbitrum/nitro-contracts>patch-package>cross-spawn
     // from: @arbitrum/token-bridge-contracts>@arbitrum/nitro-contracts>patch-package>cross-spawn
     // from: @offchainlabs/l1-l3-teleport-contracts>@arbitrum/token-bridge-contracts>@arbitrum/nitro-contracts>patch-package>cross-spawn
-    "GHSA-3xgq-45jj-v275"
+    "GHSA-3xgq-45jj-v275",
+    // https://github.com/advisories/GHSA-vg6x-rcgg-rjx6
+    // Websites were able to send any requests to the development server and read the response in vite
+    // vitest is only used in testing
+    // from: vitest>vite
+    // from: vitest>vite-node>vite
+    "GHSA-vg6x-rcgg-rjx6"
   ]
 }