chore: Ignore RUSTSEC-2026-0097 in deny.toml (#586)

siegfriedweber · web-flow · commit d8c4b88106c9 · 2026-04-15T12:39:58.000Z
diff --git a/template/deny.toml b/template/deny.toml
@@ -38,6 +38,13 @@ ignore = [
     #
     # This can only be removed again if we decide to use a different crate.
     "RUSTSEC-2024-0436",
+
+    # https://rustsec.org/advisories/RUSTSEC-2026-0097
+    # rand 0.8.5 is unsound when log+thread_rng features are enabled and a custom logger calls rand::rng().
+    #
+    # This version is pulled in transitively via num-bigint-dig -> rsa -> stackable-certs and cannot be
+    # updated until the upstream rsa crate bumps its rand dependency.
+    "RUSTSEC-2026-0097",
 ]
 
 [bans]

Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,13 @@ ignore = [`
`38`	`38`	`#`
`39`	`39`	`# This can only be removed again if we decide to use a different crate.`
`40`	`40`	`"RUSTSEC-2024-0436",`
	`41`	`+`
	`42`	`+ # https://rustsec.org/advisories/RUSTSEC-2026-0097`
	`43`	`+ # rand 0.8.5 is unsound when log+thread_rng features are enabled and a custom logger calls rand::rng().`
	`44`	`+ #`
	`45`	`+ # This version is pulled in transitively via num-bigint-dig -> rsa -> stackable-certs and cannot be`
	`46`	`+ # updated until the upstream rsa crate bumps its rand dependency.`
	`47`	`+ "RUSTSEC-2026-0097",`
`41`	`48`	`]`
`42`	`49`
`43`	`50`	`[bans]`