From 8e08432a8fb109f17dd0d2eff76483f2325bc2d8 Mon Sep 17 00:00:00 2001 From: Quentin Gliech Date: Tue, 28 Nov 2023 15:48:34 +0100 Subject: [PATCH] Ignore RUSTSEC-2023-0071 --- deny.toml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deny.toml b/deny.toml index 3197eabbb..6be2e6d49 100644 --- a/deny.toml +++ b/deny.toml @@ -16,6 +16,10 @@ ignore = [ # `wasmtime` depends on `mach` # PR to migrate to `mach2`: https://github.com/bytecodealliance/wasmtime/pull/6164 "RUSTSEC-2020-0168", + + # RSA key extraction "Marvin Attack". This is only relevant when using + # PKCS#1 v1.5 encryption, which we don't + "RUSTSEC-2023-0071" ] [licenses]