68 lines
2.6 KiB
TOML
68 lines
2.6 KiB
TOML
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2023-0071"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Vendored RSA returns before the shared private exponent primitive; unit and WebCrypto tests enforce the gate while RUSTSEC-2023-0071 has no patched release."
|
|
|
|
[[PackageOverrides]]
|
|
name = "quick-xml"
|
|
version = "0.30.0"
|
|
ecosystem = "crates.io"
|
|
vulnerability.ignore = true
|
|
effectiveUntil = 2026-10-15
|
|
reason = "Workspace and release feature graphs omit GPUI screen-capture; this optional zed-scap/xcb parser remains lock-only."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0052"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in GPUI's zed-async-tar transport dependency; migrate with the next GPUI transport refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0141"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in Servo's WebRender serialization dependency; migrate with the next Servo/WebRender refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2024-0384"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory inherited from the pinned UI and engine stack; migrate with the next upstream stack refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2024-0436"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory inherited from the pinned UI and engine stack; migrate with the next upstream stack refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0134"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in Servo's TLS parsing dependency; migrate with the next Servo networking refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2026-0192"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory across pinned GPUI and Servo font stacks; migrate with their coordinated font dependency refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0081"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0075"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0080"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0100"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
|
|
|
|
[[IgnoredVulns]]
|
|
id = "RUSTSEC-2025-0098"
|
|
ignoreUntil = 2026-10-15
|
|
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
|