Skip to content

ci: fix unsupported CVSS version: 4.0#44

Merged
pranavpadmasali merged 1 commit intomainfrom
pranav/cargo-deny-update
Jan 5, 2026
Merged

ci: fix unsupported CVSS version: 4.0#44
pranavpadmasali merged 1 commit intomainfrom
pranav/cargo-deny-update

Conversation

@pranavpadmasali
Copy link
Copy Markdown
Contributor

@pranavpadmasali pranavpadmasali commented Jan 2, 2026

Current version of cargo deny does not support CVSS version: 4.0. Updated cargo deny package.

Fixes the following error.

2025-12-23 07:33:16 [ERROR] failed to load advisory database: parse error: error parsing /home/runner/.cargo/advisory-dbs/advisory-db-3157b0e258782691/crates/cap-primitives/RUSTSEC-2024-0445.md: parse error: TOML parse error at line 8, column 8
  |
8 | cvss = "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
  |        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
unsupported CVSS version: 4.0

make: *** [Makefile:48: deny] Error 1
Error: Process completed with exit code 2.

@pranavpadmasali pranavpadmasali marked this pull request as ready for review January 2, 2026 10:13
@pranavpadmasali pranavpadmasali requested a review from a team as a code owner January 2, 2026 10:13
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the cargo-deny version from 0.18.3 to 0.18.9 to resolve an error caused by unsupported CVSS version 4.0 in the advisory database parsing.

Key Changes:

  • Update cargo-deny from version 0.18.3 to 0.18.9 in the package build action

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@pranavpadmasali pranavpadmasali merged commit 11b6f23 into main Jan 5, 2026
10 checks passed
@pranavpadmasali pranavpadmasali deleted the pranav/cargo-deny-update branch January 5, 2026 12:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants