# Entire package ignored since there is a constant stream of newly found regular expression attacks. # All of these attacks rely on the input being malicious. We only use this package in our trusted # build environment with trusted inputs. [[PackageOverrides]] effectiveUntil = 2025-11-01 # Ignored for 6 months at a time, it is unlikely to be an issue. ignore = true name = "rexml" reason = "The XML payload is generated by Apple tooling which we trust"