Add new expected CVE to iTerm2, don't fail tests if additional CVEs are found (#30225)

Confirmed that both CVEs apply to this version by checking against NVD.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated automated tests
This commit is contained in:
Ian Littman 2025-06-23 08:48:31 -05:00 committed by GitHub
parent b80d79f6d8
commit f01b6a9f88
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -410,7 +410,11 @@ func TestTranslateCPEToCVE(t *testing.T) {
continuesToUpdate: true,
},
"cpe:2.3:a:iterm2:iterm2:3.5.1:*:*:*:*:*:*:*": {
includedCVEs: []cve{{ID: "CVE-2024-38395", resolvedInVersion: "3.5.2"}},
includedCVEs: []cve{
{ID: "CVE-2024-38395", resolvedInVersion: "3.5.2"},
{ID: "CVE-2024-38396", resolvedInVersion: "3.5.2"},
},
continuesToUpdate: true,
},
"cpe:2.3:a:simple_password_store_project:simple_password_store:1.7.0:*:*:*:*:macos:*:*": {
includedCVEs: []cve{{ID: "CVE-2018-12356", resolvedInVersion: "1.7.2"}},