fixes #4 ignoring CVE-2024-5480

Plant-Tracer · Aug 25, 2024 · f6c65b9 · f6c65b9
1 parent 698924a
commit f6c65b9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/docs/source/security.md b/docs/source/security.md
@@ -0,0 +1,6 @@
+Security Notes
+==============
+
+* 2024-08-25-1: Have enabled snyk vulnerability PR generation
+
+* 2024-08-25-2: Have snyk-ignored CVE-2024-5480. This vulnerability apparently is only relevant when using pytorch.distributed features, which PlantTracerML currently does not use. Ignoring it because the pytorch folks seem disinclined to address it, and refer to a policy never to use the distributed features on an insecure network.