brave/brave-browser

Audit finding: https://rustsec.org/advisories/RUSTSEC-2021-0146

Closed this issue · 15 comments

brave-builds commented

Greetings human!

Bad news. Audit failed on nightly/v1.50.2 due to https://rustsec.org/advisories/RUSTSEC-2021-0146.

rillian commented

Suggest we ignore this for 1.48/49 via brave/audit-config#15

wknapik commented

Closing, since this was ignored in brave/audit-config#15

antonok-edm commented

@wknapik the ignore in audit-config can be removed once brave/brave-core#17368 is merged, as it removes the twoway dependency

rillian commented

I think that since the ignore list doesn't have separate branches for different brave-core versions, we have to wait for the fix to migrate to release before we can remove the ignore.

  • 👍2