diff options
| author | Markus Pettersson <markus.pettersson@mullvad.net> | 2025-10-01 11:00:42 +0200 |
|---|---|---|
| committer | Markus Pettersson <markus.pettersson@mullvad.net> | 2025-10-01 11:00:42 +0200 |
| commit | 0be0fe1b4744995aabf4e156723181747af05a37 (patch) | |
| tree | 8639ff6b52495118bcfd36277eaae98b46ce110d | |
| parent | 726415ef83004ccd9560229bab6a96d394a3a368 (diff) | |
| parent | 3981421c1474256decc67989eee0ca9b5478e8bb (diff) | |
| download | mullvadvpn-0be0fe1b4744995aabf4e156723181747af05a37.tar.xz mullvadvpn-0be0fe1b4744995aabf4e156723181747af05a37.zip | |
Merge branch 'unsilence-rustsec-2024-0436'
| -rw-r--r-- | android/translations-converter/Cargo.toml | 2 | ||||
| -rw-r--r-- | deny.toml | 3 | ||||
| -rw-r--r-- | osv-scanner.toml | 9 |
3 files changed, 1 insertions, 13 deletions
diff --git a/android/translations-converter/Cargo.toml b/android/translations-converter/Cargo.toml index 3cb9176496..4ea4e00059 100644 --- a/android/translations-converter/Cargo.toml +++ b/android/translations-converter/Cargo.toml @@ -12,7 +12,7 @@ workspace = true [dependencies] thiserror = { workspace = true } -htmlize = { version = "1.0.2", features = ["unescape"] } +htmlize = { version = "1.0.6", features = ["unescape"] } regex = "1" serde = { workspace = true, features = ["derive"] } quick-xml = { version = "0.27.1", features = ["serialize"] } @@ -28,9 +28,6 @@ yanked = "deny" ignore = [ # Ignored audit issues. This list should be kept short, and effort should be # put into removing items from the list. - # - # RUSTSEC-2024-0436 - paste no longer maintained. There is currently no "fix" for this, and htmlize depend on it. - "RUSTSEC-2024-0436" ] diff --git a/osv-scanner.toml b/osv-scanner.toml index 19bcf6caf1..7df9f816d2 100644 --- a/osv-scanner.toml +++ b/osv-scanner.toml @@ -67,12 +67,3 @@ # effectiveUntil = 2024-11-02 # reason = "The XML payload is generated by Apple tooling which we trust" # ``` - -# The `paste` crate is no longer maintained -[[IgnoredVulns]] -id = "RUSTSEC-2024-0436" -ignoreUntil = 2025-09-12 -reason = """ -The `paste` crate is no longer maintained. `htmlize` depend on it, and there is currently no "fix" for this. -We have no reason to suspect that `paste` is vulnerable in any way. -""" |
