From 7618b0d667dbfe0df98b69705e08d51ecc168150 Mon Sep 17 00:00:00 2001 From: Fraser Hutchison <190532+Fraser999@users.noreply.github.com> Date: Tue, 14 Apr 2026 18:26:16 +0100 Subject: [PATCH] ignore new cargo audit warning --- .cargo/audit.toml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.cargo/audit.toml b/.cargo/audit.toml index d6bf58e..39b3401 100644 --- a/.cargo/audit.toml +++ b/.cargo/audit.toml @@ -11,4 +11,9 @@ ignore = [ # `paste` is unmaintained; transitive dep via revm's `ark-ff` and alloy's `syn-solidity`. "RUSTSEC-2024-0436", + + # `rand` 0.8.5 unsoundness when `log` + `thread_rng` features are both enabled and a custom + # logger calls `rand::rng()` during reseeding. Our 0.8.5 (transitive via alloy-consensus) + # has neither feature enabled; our 0.9.4 is already patched. + "RUSTSEC-2026-0097", ]