From 25dbfa36fd9c32fee1d15386cc358dfc3885bfd9 Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Sun, 25 Sep 2022 18:02:35 +0100
Subject: [PATCH] wasm3: add many knownVulnerabilities

---
 pkgs/development/interpreters/wasm3/default.nix | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/pkgs/development/interpreters/wasm3/default.nix b/pkgs/development/interpreters/wasm3/default.nix
index b16dc78ac08e..036010e1356a 100644
--- a/pkgs/development/interpreters/wasm3/default.nix
+++ b/pkgs/development/interpreters/wasm3/default.nix
@@ -29,5 +29,18 @@ stdenv.mkDerivation rec {
     platforms = platforms.all;
     maintainers = with maintainers; [ malbarbo ];
     license = licenses.mit;
+    knownVulnerabilities = [
+      # wasm3 expects all wasm code to be pre-validated, any users
+      # should be aware that running unvalidated wasm will potentially
+      # lead to RCE until upstream have added a builtin validator
+      "CVE-2022-39974"
+      "CVE-2022-34529"
+      "CVE-2022-28990"
+      "CVE-2022-28966"
+      "CVE-2021-45947"
+      "CVE-2021-45946"
+      "CVE-2021-45929"
+      "CVE-2021-38592"
+    ];
   };
 }