mirrors/mise
0
0 Fork 0
mirror of https://github.com/jdx/mise.git synced 2026-10-28 16:45:21 +08:00
Code Activity

chore(deps): ignore RUSTSEC-2026-0374 basic-toml unmaintained advisory

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Entire-Checkpoint: 01M5CQM8JQ9XRB1T3ZNC7H3WFN
This commit is contained in:
Jeff DickeyandClaude Sonnet 5.5 committed 2026-10-20 08:22:18 -05:00
1 parent 930003cb09
commit f2f2759992
1 file changed
+1
Download Patch File Download Diff File Expand all files Collapse all files
deny.toml
+1
View File
@@ -76,6 +76,7 @@ ignore = [
{ id = "RUSTSEC-2026-0367", reason = "zip < 9 SUID/SGID extraction advisory - mise's own zip is 9; the remaining 8.x copy comes from aube (which only reads the OSV database zip) and ubi, whose extract_all option calls ZipArchive::extract on release archives, so this is a residual risk until ubi moves to zip 9, no safe upgrade available" },
{ id = "RUSTSEC-2026-0368", reason = "zip < 9 symlink target extraction advisory - mise's own zip is 9; the remaining 8.x copy comes from aube (which only reads the OSV database zip) and ubi, whose extract_all option calls ZipArchive::extract on release archives, so this is a residual risk until ubi moves to zip 9, no safe upgrade available" },
{ id = "RUSTSEC-2026-0369", reason = "zip < 9 symlink permissions advisory - mise's own zip is 9; the remaining 8.x copy comes from aube (which only reads the OSV database zip) and ubi, whose extract_all option calls ZipArchive::extract on release archives, so this is a residual risk until ubi moves to zip 9, no safe upgrade available" },
{ id = "RUSTSEC-2026-0374", reason = "basic-toml unmaintained - transitive via age (i18n-config) and rops, no safe upgrade available" },
#"RUSTSEC-0000-0000",
#{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" },
#"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish