Skip to content

Commit

Permalink
remove resolved audit ignores
Browse files Browse the repository at this point in the history
  • Loading branch information
syphar committed Feb 22, 2025
1 parent 8cbb634 commit fb5300b
Showing 1 changed file with 1 addition and 14 deletions.
15 changes: 1 addition & 14 deletions .cargo/audit.toml
Original file line number Diff line number Diff line change
@@ -1,23 +1,10 @@
[advisories]
ignore = [
"RUSTSEC-2023-0018", # rustwide -> remove_dir_all,TOCTOU / Race Condition
# https://github.com/rust-lang/docs.rs/issues/2074

"RUSTSEC-2023-0071", # potential key recovery through timing sidechannels

"RUSTSEC-2024-0013", # Memory corruption, denial of service, and arbitrary code execution in libgit2
# https://github.com/rust-lang/docs.rs/issues/2414
"RUSTSEC-2023-0071", # rsa: potential key recovery through timing sidechannels

"RUSTSEC-2024-0320", # yaml-rust is unmaintained.
# https://github.com/rust-lang/docs.rs/issues/2469

"RUSTSEC-2024-0363", # sqlx, Binary Protocol Misinterpretation caused by Truncating or Overflowing Cast
# https://github.com/rust-lang/docs.rs/issues/2588
# SECURITY:
# We have plenty of places where user input ends up in sql, for example the inner doc path for doc pages, crate names etc.
# But in all these places, the user content is part of the path of the URL.
# Since URL length is limited by cloudfront, and also by nginx, to something much smaller than 4 GiB, I don't think this issue affects us.

"RUSTSEC-2024-0370", # proc-macro-error is unmaintained
# https://github.com/rust-lang/docs.rs/issues/2595

Expand Down

0 comments on commit fb5300b

Please sign in to comment.