Skip to content

Commit 206a88c

Browse files
committed
chore: Remove undetected, ignored advisories
1 parent f2e5f8e commit 206a88c

File tree

1 file changed

+0
-25
lines changed

1 file changed

+0
-25
lines changed

deny.toml

Lines changed: 0 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -14,31 +14,6 @@ targets = [
1414

1515
[advisories]
1616
yanked = "deny"
17-
ignore = [
18-
# https://rustsec.org/advisories/RUSTSEC-2023-0071
19-
# "rsa" crate: Marvin Attack: potential key recovery through timing sidechannel
20-
#
21-
# No patch is yet available, however work is underway to migrate to a fully constant-time implementation
22-
# So we need to accept this, as of SDP 25.3 we are not using the rsa crate to create certificates used in production
23-
# setups.
24-
#
25-
# https://github.com/RustCrypto/RSA/issues/19 is the tracking issue
26-
"RUSTSEC-2023-0071",
27-
28-
# https://rustsec.org/advisories/RUSTSEC-2024-0436
29-
# The "paste" crate is no longer maintained because the owner states that the implementation is
30-
# finished. There are at least two (forked) alternatives which state to be maintained. They'd
31-
# need to be vetted before a potential switch. Additionally, they'd need to be in a maintained
32-
# state for a couple of years to provide any benefit over using "paste".
33-
#
34-
# This crate is only used in a single place in the xtask package inside the declarative
35-
# "write_crd" macro. The impact of vulnerabilities, if any, should be fairly minimal.
36-
#
37-
# See thread: https://users.rust-lang.org/t/paste-alternatives/126787/4
38-
#
39-
# This can only be removed again if we decide to use a different crate.
40-
"RUSTSEC-2024-0436",
41-
]
4217

4318
[bans]
4419
multiple-versions = "allow"

0 commit comments

Comments
 (0)