From b300e23c6bb8f12817e7a2e4a1039ec5064eced6 Mon Sep 17 00:00:00 2001 From: Denis Cornehl Date: Tue, 28 Nov 2023 17:09:20 +0100 Subject: [PATCH] add RSA rustsec warning to ignores, we don't use that dependency --- .cargo/audit.toml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.cargo/audit.toml b/.cargo/audit.toml index dfe918ab9..3ed1d66ae 100644 --- a/.cargo/audit.toml +++ b/.cargo/audit.toml @@ -5,6 +5,8 @@ ignore = [ "RUSTSEC-2023-0018", # rustwide -> remove_dir_all,TOCTOU / Race Condition # https://github.com/rust-lang/docs.rs/issues/2074 + + "RUSTSEC-2023-0071", # potential key recovery through timing sidechannels ] informational_warnings = ["unmaintained"] # warn for categories of informational advisories severity_threshold = "low" # CVSS severity ("none", "low", "medium", "high", "critical")