Merge branch 'silence-RUSTSEC-2024-0370-in-osv-scanner'

mullvad · Sep 6, 2024 · ebdab8c · ebdab8c
2 parents f0e121d + a4e236a
commit ebdab8c
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/osv-scanner.toml b/osv-scanner.toml
@@ -50,3 +50,11 @@ KyberSlash is not exploitable in our usage of it:
 https://mullvad.net/en/blog/mullvads-usage-of-kyber-is-not-affected-by-kyberslash
 And no patched version is available.
 """
+
+[[IgnoredVulns]]
+id = "RUSTSEC-2024-0370"
+ignoreUntil = 2024-12-06
+reason = """
+proc-macro-error is unmaintained, but it does not necessarily contain any vulns.
+Will be fixed by bumping `nftnl`.
+"""