Skip to content

Commit ed7ac7f

Browse files
committed
chore(ci): Ignore RUSTSEC-2024-0336
Vulnerabe version is only used in dev dependencies. Will work on upgrading separately. Signed-off-by: Jesse Szwedko <[email protected]>
1 parent 6d1d521 commit ed7ac7f

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

deny.toml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,4 +48,9 @@ ignore = [
4848
# There is a fixed version (v0.12.3) but we are blocked from upgrading to `http` v1, which
4949
# `tonic` v0.12 depends on. See https://github.com/vectordotdev/vector/issues/19179
5050
"RUSTSEC-2024-0376",
51+
52+
# Advisory in rustls crate: https://rustsec.org/advisories/RUSTSEC-2024-0336 If a `close_notify`
53+
# alert is received during a handshake, `complete_io` does not terminate.
54+
# Vulnerable version only used in dev-dependencies
55+
"RUSTSEC-2024-0336",
5156
]

0 commit comments

Comments
 (0)