Skip to content

Commit d21671b

Browse files
authored
chore(audit): ignore hickory-proto advisories (#4332) (#4374)
- RUSTSEC-2026-0118: NSEC3 loop, only reachable via libp2p-mdns which is not compiled (mdns feature off) - RUSTSEC-2026-0119: O(n^2) name compression on encode, libp2p-dns does one-name lookups (cherry picked from commit ff7ad05)
1 parent 195abca commit d21671b

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

.cargo/audit.toml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,4 +15,10 @@ ignore = [
1515
"RUSTSEC-2025-0009",
1616
# Still here because of `ark-relations` crate.
1717
"RUSTSEC-2025-0055",
18+
# hickory-proto NSEC3 loop. Only reachable via libp2p-mdns; mdns feature is not enabled in our
19+
# libp2p config, so not compiled in.
20+
"RUSTSEC-2026-0118",
21+
# hickory-proto O(n^2) name compression on encode. libp2p does lookups one name at a time, not
22+
# vulnerable, no patch release in libp2p available yet
23+
"RUSTSEC-2026-0119",
1824
]

0 commit comments

Comments
 (0)