mirror of
https://github.com/sudosylabs/vnidrop.git
synced 2026-08-05 18:39:55 +02:00
Hammed Abass
d0c8d8774a
Tighten approve-endpoint to active shares with TTL sessions, reject non-file FDs, lower default ticket/approval/size caps, show endpoint IDs and Public-mode warnings, harden Android receive path checks, and run cargo-audit in CI.
12 lines
427 B
TOML
12 lines
427 B
TOML
# Known transitive advisories we cannot fully clear without upstream iroh bumps.
|
|
# cargo audit in CI fails on new unlisted vulnerabilities.
|
|
[advisories]
|
|
ignore = [
|
|
# rsa: Marvin timing side-channel; no fixed release; pulled by iroh stack.
|
|
"RUSTSEC-2023-0071",
|
|
# quick-xml / crossbeam-epoch: transitive; track via iroh/dependency updates.
|
|
"RUSTSEC-2026-0194",
|
|
"RUSTSEC-2026-0195",
|
|
"RUSTSEC-2026-0204",
|
|
]
|