Skip to content

Commit f624622

Browse files
committed
fix: ignore RUSTSEC-2026-0049 in cargo-audit config
rustls-webpki 0.102.x has no patch (fix only in 0.103.10+). Transitive dependency via rumqttc - waiting for upstream fix.
1 parent 25b2994 commit f624622

1 file changed

Lines changed: 11 additions & 0 deletions

File tree

.cargo/audit.toml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
# cargo-audit configuration
2+
# See: https://github.com/rustsec/rustsec/blob/main/cargo-audit/audit.toml.example
3+
4+
[advisories]
5+
# Advisories to ignore (transitive dependencies we can't fix)
6+
ignore = [
7+
# rustls-webpki 0.102.x CRL issue - no patch in 0.102.x line
8+
# Transitive via rumqttc, waiting for upstream fix
9+
# Low impact: requires compromised CA to exploit
10+
"RUSTSEC-2026-0049",
11+
]

0 commit comments

Comments
 (0)