From 554c8d9da397a1d5132bd83a34b6c00384f8b7ce Mon Sep 17 00:00:00 2001 From: Bohu Date: Tue, 9 Jul 2024 08:48:40 +0800 Subject: [PATCH] Update audit.toml --- .cargo/audit.toml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.cargo/audit.toml b/.cargo/audit.toml index dbb3edd7496c..c74717b72c9c 100644 --- a/.cargo/audit.toml +++ b/.cargo/audit.toml @@ -36,5 +36,13 @@ ignore = [ # Degradation of service in h2 servers with CONTINUATION Flood(Wait for tonic to fix) "RUSTSEC-2024-0332", # `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input - "RUSTSEC-2024-0336" + "RUSTSEC-2024-0336", + # gix-fs: Traversal outside working tree enables arbitrary code execution + "RUSTSEC-2024-0350", + # gix-index: Traversal outside working tree enables arbitrary code execution + "RUSTSEC-2024-0348", + # gix-index: Refs and paths with reserved Windows device names access the devices + "RUSTSEC-2024-0352", + # gix-ref: Refs and paths with reserved Windows device names access the devices + "RUSTSEC-2024-0351" ]