audit.toml

[advisories]
ignore = [
    # rio: v0.9.4 https://rustsec.org/advisories/RUSTSEC-2020-0021
    # allows a use-after-free buffer access when a future is leaked
    "RUSTSEC-2020-0021",
    # time: Potential segfault in the time crate
    # We are not affected by this CVE.
    # And there is no actions we can take, waiting for upstream.
    "RUSTSEC-2020-0071",
    # hyper
    # Lenient `hyper` header parsing of `Content-Length` could allow request smuggling
    "RUSTSEC-2021-0078",
    # hyper
    # Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
    "RUSTSEC-2021-0079",
    # ansi_term
    # ansi_term is Unmaintained
    "RUSTSEC-2021-0139",
    # buf_redux
    # buf_redux is Unmaintained
    "RUSTSEC-2023-0028",
    # rsa
    # Marvin Attack: potential key recovery through timing sidechannels
    "RUSTSEC-2023-0071",
    # mach
    # mach is Unmaintained
    "RUSTSEC-2020-0168",
    # atty
    # Potential unaligned read
    "RUSTSEC-2021-0145",
    # borsh
    # Parsing borsh messages with ZST which are not-copy/clone is unsound
    "RUSTSEC-2023-0033"
]