diff options
| author | Markus Pettersson <markus.pettersson@mullvad.net> | 2025-03-11 12:05:57 +0100 |
|---|---|---|
| committer | Markus Pettersson <markus.pettersson@mullvad.net> | 2025-03-11 12:05:57 +0100 |
| commit | f85d5b39493379fae6004ba12a3ec5643af057a4 (patch) | |
| tree | 30210279a7627c796a4b90511e2336b8a0db0ebc | |
| parent | 659014d6509dd7fe4240c20745594bcaff372d73 (diff) | |
| parent | a8f288496787e82a6f78f5a988c8bd3106ba29f5 (diff) | |
| download | mullvadvpn-f85d5b39493379fae6004ba12a3ec5643af057a4.tar.xz mullvadvpn-f85d5b39493379fae6004ba12a3ec5643af057a4.zip | |
Merge branch 'silence-RUSTSEC-2024-0436'
| -rw-r--r-- | deny.toml | 3 | ||||
| -rw-r--r-- | osv-scanner.toml | 9 |
2 files changed, 12 insertions, 0 deletions
@@ -28,6 +28,9 @@ yanked = "deny" ignore = [ # Ignored audit issues. This list should be kept short, and effort should be # put into removing items from the list. + # + # RUSTSEC-2024-0436 - paste no longer maintained. There is currently no "fix" for this, and htmlize depend on it. + "RUSTSEC-2024-0436" ] diff --git a/osv-scanner.toml b/osv-scanner.toml index 7df9f816d2..0376f79abe 100644 --- a/osv-scanner.toml +++ b/osv-scanner.toml @@ -67,3 +67,12 @@ # effectiveUntil = 2024-11-02 # reason = "The XML payload is generated by Apple tooling which we trust" # ``` + +# The `paste` crate is no longer maintained +[[IgnoredVulns]] +id = "RUSTSEC-2024-0436" +ignoreUntil = 2025-06-11 +reason = """ +The `paste` crate is no longer maintained. `htmlize` depend on it, and there is currently no "fix" for this. +We have no reason to suspect that `paste` is vulnerable in any way. +""" |