Merge branch 'silence-rustsec-2024-0384'

mullvad · Nov 11, 2024 · 64ed69c · 64ed69c
2 parents 52abc45 + f7735b9
commit 64ed69c
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/test/osv-scanner.toml b/test/osv-scanner.toml
@@ -1 +1,12 @@
 # See repository root `osv-scanner.toml` for instructions and rules for this file.
+
+# `instant` is unmaintained.
+[[IgnoredVulns]]
+id = "RUSTSEC-2024-0384"
+ignoreUntil = 2025-02-11
+reason = """
+There is no reported vulnerability in the `instant` crate, but it is unmaintained and the author suggest switching to
+a fork instead of depending on `instant`. In our tree it is `ssh2` that currently depend on `instant` through an old
+version of `parking_lot`, preventing us from upgrading to a fixed version. This ignore can be removed when
+https://github.com/alexcrichton/ssh2-rs/issues/338 is resolved.
+"""