From 8a0904e266470b6ce445f8b705a7df77076cd74d Mon Sep 17 00:00:00 2001
From: Emily <vcs@emily.moe>
Date: Thu, 7 Nov 2024 00:17:54 +0000
Subject: [PATCH] jujutsu: mark as vulnerable
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

It does not seem viable to backport the fix across half a year’s
internal changes. Jujutsu users are unlikely to be using a version
this old, anyway, given the current rapid pace of development.
---
 pkgs/applications/version-management/jujutsu/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/applications/version-management/jujutsu/default.nix b/pkgs/applications/version-management/jujutsu/default.nix
index 54a7617f2b0f..bfd29157b49c 100644
--- a/pkgs/applications/version-management/jujutsu/default.nix
+++ b/pkgs/applications/version-management/jujutsu/default.nix
@@ -84,5 +84,6 @@ rustPlatform.buildRustPackage rec {
     license = licenses.asl20;
     maintainers = with maintainers; [ _0x4A6F thoughtpolice ];
     mainProgram = "jj";
+    knownVulnerabilities = [ "CVE-2024-51990" ];
   };
 }