summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2025-10-01 11:00:42 +0200
committerMarkus Pettersson <markus.pettersson@mullvad.net>2025-10-01 11:00:42 +0200
commit0be0fe1b4744995aabf4e156723181747af05a37 (patch)
tree8639ff6b52495118bcfd36277eaae98b46ce110d
parent726415ef83004ccd9560229bab6a96d394a3a368 (diff)
parent3981421c1474256decc67989eee0ca9b5478e8bb (diff)
downloadmullvadvpn-0be0fe1b4744995aabf4e156723181747af05a37.tar.xz
mullvadvpn-0be0fe1b4744995aabf4e156723181747af05a37.zip
Merge branch 'unsilence-rustsec-2024-0436'
-rw-r--r--android/translations-converter/Cargo.toml2
-rw-r--r--deny.toml3
-rw-r--r--osv-scanner.toml9
3 files changed, 1 insertions, 13 deletions
diff --git a/android/translations-converter/Cargo.toml b/android/translations-converter/Cargo.toml
index 3cb9176496..4ea4e00059 100644
--- a/android/translations-converter/Cargo.toml
+++ b/android/translations-converter/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
[dependencies]
thiserror = { workspace = true }
-htmlize = { version = "1.0.2", features = ["unescape"] }
+htmlize = { version = "1.0.6", features = ["unescape"] }
regex = "1"
serde = { workspace = true, features = ["derive"] }
quick-xml = { version = "0.27.1", features = ["serialize"] }
diff --git a/deny.toml b/deny.toml
index 87263689b0..631d1da653 100644
--- a/deny.toml
+++ b/deny.toml
@@ -28,9 +28,6 @@ yanked = "deny"
ignore = [
# Ignored audit issues. This list should be kept short, and effort should be
# put into removing items from the list.
- #
- # RUSTSEC-2024-0436 - paste no longer maintained. There is currently no "fix" for this, and htmlize depend on it.
- "RUSTSEC-2024-0436"
]
diff --git a/osv-scanner.toml b/osv-scanner.toml
index 19bcf6caf1..7df9f816d2 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -67,12 +67,3 @@
# effectiveUntil = 2024-11-02
# reason = "The XML payload is generated by Apple tooling which we trust"
# ```
-
-# The `paste` crate is no longer maintained
-[[IgnoredVulns]]
-id = "RUSTSEC-2024-0436"
-ignoreUntil = 2025-09-12
-reason = """
-The `paste` crate is no longer maintained. `htmlize` depend on it, and there is currently no "fix" for this.
-We have no reason to suspect that `paste` is vulnerable in any way.
-"""