From f01b6a9f88e67bec8341a2a182ca4f175bfeee0f Mon Sep 17 00:00:00 2001 From: Ian Littman Date: Mon, 23 Jun 2025 08:48:31 -0500 Subject: [PATCH] Add new expected CVE to iTerm2, don't fail tests if additional CVEs are found (#30225) Confirmed that both CVEs apply to this version by checking against NVD. # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Added/updated automated tests --- server/vulnerabilities/nvd/cve_test.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/server/vulnerabilities/nvd/cve_test.go b/server/vulnerabilities/nvd/cve_test.go index 4cd0b4d943..fa5d07aa62 100644 --- a/server/vulnerabilities/nvd/cve_test.go +++ b/server/vulnerabilities/nvd/cve_test.go @@ -410,7 +410,11 @@ func TestTranslateCPEToCVE(t *testing.T) { continuesToUpdate: true, }, "cpe:2.3:a:iterm2:iterm2:3.5.1:*:*:*:*:*:*:*": { - includedCVEs: []cve{{ID: "CVE-2024-38395", resolvedInVersion: "3.5.2"}}, + includedCVEs: []cve{ + {ID: "CVE-2024-38395", resolvedInVersion: "3.5.2"}, + {ID: "CVE-2024-38396", resolvedInVersion: "3.5.2"}, + }, + continuesToUpdate: true, }, "cpe:2.3:a:simple_password_store_project:simple_password_store:1.7.0:*:*:*:*:macos:*:*": { includedCVEs: []cve{{ID: "CVE-2018-12356", resolvedInVersion: "1.7.2"}},