From f0b48706406b789a85f021c6860a7fea61b9ac34 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Mon, 6 Dec 2021 13:27:17 +0100
Subject: nodejs: mark versions older than 12 as vulnerable

NodeJS 10 has reached EOL since 2021/04.
---
 pkgs/development/web/nodejs/nodejs.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'pkgs/development/web/nodejs')

diff --git a/pkgs/development/web/nodejs/nodejs.nix b/pkgs/development/web/nodejs/nodejs.nix
index 3f0f0e78e07a..b87fb842c572 100644
--- a/pkgs/development/web/nodejs/nodejs.nix
+++ b/pkgs/development/web/nodejs/nodejs.nix
@@ -148,6 +148,7 @@ let
       maintainers = with maintainers; [ goibhniu gilligan cko marsam ];
       platforms = platforms.linux ++ platforms.darwin;
       mainProgram = "node";
+      knownVulnerabilities = optional (versionOlder version "12") "This NodeJS release has reached its end of life. See https://nodejs.org/en/about/releases/.";
     };
 
     passthru.python = python; # to ensure nodeEnv uses the same version
-- 
cgit 1.4.1