chore: ignore RUSTSEC-2020-0146 for now (dfinity#1453)

ethereumspace · Mar 2, 2021 · 063a4df · 063a4df
1 parent 57cb497
commit 063a4df
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/cargo-audit.nix b/cargo-audit.nix
@@ -12,5 +12,15 @@ pkgs.lib.cargo-security-audit {
   name = "dfinity-sdk";
   cargoLock = ./Cargo.lock;
   db = RustSec-advisory-db;
-  ignores = [];
+  # Ignore this vulnerability for as we have an indirect dependency on it
+  # ID:       RUSTSEC-2020-0146
+  # Crate:    generic-array
+  # Version:  0.12.3
+  # Date:     2020-04-09
+  # URL:      https://rustsec.org/advisories/RUSTSEC-2020-0146
+  # Title:    arr! macro erases lifetimes
+  # Solution:  upgrade to >= 0.14.0
+  # Dependency tree:
+  # generic-array 0.12.3
+  ignores = [ "RUSTSEC-2020-0146" ];
 }