Ankur Tyagi 62c89f704e
python3-werkzeug: ignore CVE-2025-66221 and CVE-2026-21860
Both vulnerabilties are for Windows and can be ignored.

Details:
- https://nvd.nist.gov/vuln/detail/CVE-2025-66221
- https://nvd.nist.gov/vuln/detail/CVE-2026-21860

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-01-19 12:15:43 +05:30

28 lines
1.1 KiB
BlitzBasic

SUMMARY = "The comprehensive WSGI web application library"
DESCRIPTION = "\
Werkzeug started as simple collection of various utilities for WSGI \
applications and has become one of the most advanced WSGI utility modules. \
It includes a powerful debugger, full featured request and response objects, \
HTTP utilities to handle entity tags, cache control headers, HTTP dates, \
cookie handling, file uploads, a powerful URL routing system and a bunch \
of community contributed addon modules."
HOMEPAGE = "https://werkzeug.palletsprojects.com"
LICENSE = "BSD-3-Clause"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=5dc88300786f1c214c1e9827a5229462"
SRC_URI[sha256sum] = "a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d"
inherit pypi python_flit_core
RDEPENDS:${PN} += " \
python3-markupsafe \
python3-logging \
python3-profile \
python3-compression \
python3-json \
python3-difflib \
"
CVE_STATUS[CVE-2025-66221] = "not-applicable-platform: The vulnerability is Windows specific"
CVE_STATUS[CVE-2026-21860] = "not-applicable-platform: The vulnerability is Windows specific"