From e927cf718bb659617dbeaed2edac0316fd73e591 Mon Sep 17 00:00:00 2001
From: Benjamin Sparks <b.sparks@alugha.com>
Date: Fri, 24 Oct 2025 20:38:57 +0200
Subject: [PATCH] cotton: mark as vulnerable to CVE-2025-62518

(cherry picked from commit d58c255cb5b7392500108772c33f49aa26af2a4b)
---
 pkgs/by-name/co/cotton/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/co/cotton/package.nix b/pkgs/by-name/co/cotton/package.nix
index 316dd23f6215..0e85fb38c8f6 100644
--- a/pkgs/by-name/co/cotton/package.nix
+++ b/pkgs/by-name/co/cotton/package.nix
@@ -26,5 +26,9 @@ rustPlatform.buildRustPackage rec {
       dit7ya
       figsoda
     ];
+
+    knownVulnerabilities = [
+      "'cotton' is vulnerable to CVE-2025-62518"
+    ];
   };
 }