From a4e236ad8666761fb28e8a787126edbf9a350e2e Mon Sep 17 00:00:00 2001 From: Markus Pettersson Date: Fri, 6 Sep 2024 15:52:01 +0200 Subject: [PATCH] Silence `RUSTSEC-2024-0370` in `osv-scanner` --- osv-scanner.toml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/osv-scanner.toml b/osv-scanner.toml index 0349695942a6..02b147917787 100644 --- a/osv-scanner.toml +++ b/osv-scanner.toml @@ -50,3 +50,11 @@ KyberSlash is not exploitable in our usage of it: https://mullvad.net/en/blog/mullvads-usage-of-kyber-is-not-affected-by-kyberslash And no patched version is available. """ + +[[IgnoredVulns]] +id = "RUSTSEC-2024-0370" +ignoreUntil = 2024-12-06 +reason = """ +proc-macro-error is unmaintained, but it does not necessarily contain any vulns. +Will be fixed by bumping `nftnl`. +"""