From 20b33647865e99c069664ea33be5056a7f927d7b Mon Sep 17 00:00:00 2001 From: "s0wlz (Matthias Puchstein)" Date: Sat, 2 May 2026 21:15:43 +0200 Subject: [PATCH] chore: ignore RUSTSEC-2023-0071 in cargo audit (no fixed upgrade available) --- backend/audit.toml | 2 ++ deploy/values_override.yaml | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 backend/audit.toml diff --git a/backend/audit.toml b/backend/audit.toml new file mode 100644 index 0000000..15298d4 --- /dev/null +++ b/backend/audit.toml @@ -0,0 +1,2 @@ +[advisories] +ignore = ["RUSTSEC-2023-0071"] # Marvin Attack: potential key recovery through timing sidechannels in 'rsa' crate. No fixed upgrade available yet. diff --git a/deploy/values_override.yaml b/deploy/values_override.yaml index 4e6ffdc..7cc1bc9 100644 --- a/deploy/values_override.yaml +++ b/deploy/values_override.yaml @@ -3,7 +3,7 @@ httpRoute: - tutor.puchstein.dev image: - tag: v0.1.13 + tag: v0.1.14 env: extra: {}