Edouard Vanbelle 0f8eb6d3ab chore: audit: ignore rustls-webpki 0.101.7 issue ...

# rustls-webpki 0.101.7 — three advisories, all transitive via AWS SDK → rustls 0.21.12.
   # aws-sdk-s3 1.x (latest) has not yet migrated to rustls 0.23.x; no upgrade path available.
   # Severity: low — exploitation requires either a rogue CA or a MitM on AWS S3 infrastructure.
   #   RUSTSEC-2026-0104: DoS via panic in CRL parsing (only if CRLs are processed).
   #   RUSTSEC-2026-0098: URI name constraints ignored (requires CA misissuance).
   #   RUSTSEC-2026-0099: Wildcard name constraint bypass (requires CA misissuance).
   "RUSTSEC-2026-0104",
   "RUSTSEC-2026-0098",
   "RUSTSEC-2026-0099",

   # instant unmaintained — transitive via azure_core 0.21.0 (latest available).
   # No direct security impact; no upgrade path exists.
   "RUSTSEC-2024-0384",

2026-05-04 14:25:45 +02:00

..

audit.toml

chore: audit: ignore rustls-webpki 0.101.7 issue

2026-05-04 14:25:45 +02:00

config.toml

chore: track .cargo/config.toml (target-cpu=native build config)

2026-03-06 23:37:35 +01:00