General
PromptBeginner5 minmarkdown
Untitled Skill
215
Trivy ignore file for the Dependency Audit gate.
CVE-2024-35515
Views0
PublishedJul 28, 2026
Loading actions...
5 minBeginnerpromptSingle file
Skill content
Main instructions and any bundled files for this skill.
Trivy ignore file for the Dependency Audit gate.
Only UNFIXABLE vulnerabilities (no upstream patch available) belong here.
ignore-unfixed: false is deliberately kept in the workflow so that any
FIXABLE HIGH/CRITICAL finding still fails CI.
CVE-2024-35515 - sqlitedict: arbitrary code execution via insecure
deserialization. There is NO patched release: 2.1.0 is the latest version
published upstream and the project is effectively unmaintained. sqlitedict
is pulled in only transitively by manifest-ml (the optional manifest
extra) and is never used to deserialize untrusted, attacker-controlled
data within guardrails. Residual risk is therefore acceptable until an
upstream fix or a manifest-ml release that drops the dependency exists.
CVE-2024-35515
Related Skills
General
PromptBeginner5 minmarkdown
Frontend Typescript Linting.mdc
TypeScript and ESLint rules that MUST be followed when creating, modifying, or reviewing any file under apps/frontend/, including .ts, .tsx, .js, and .jsx files. Also apply when discussing frontend li...
204
General
PromptBeginner5 minmarkdown
Bundle API
Stable surface that Langflow Extension Bundles consume. Every public symbol
155