From 67c4131aeda8686c9378ca8ce8e2ab9aa0d6f7dd Mon Sep 17 00:00:00 2001 From: Tess Neau Date: Mon, 12 Oct 2026 15:23:21 +0200 Subject: [PATCH] chore(deps): ignore unsafe-libyaml unmaintained advisory MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Temporarily ignore RUSTSEC-2024-0449 for serde_yaml and VRL’s serde_yaml_ng while the upstream backend migration is pending. Generated with openai/gpt-6.1-sol. --- deny.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/deny.toml b/deny.toml index e90b4df349678..c1d9acafab693 100644 --- a/deny.toml +++ b/deny.toml @@ -42,6 +42,7 @@ license-files = [ ignore = [ { id = "RUSTSEC-2023-0071", reason = "rsa marvin attack - unpatched upstream (https://github.com/vectordotdev/vector/issues/19262)" }, { id = "RUSTSEC-2024-0388", reason = "derivative is unmaintained (https://github.com/vectordotdev/vector/issues/24940)" }, + { id = "RUSTSEC-2024-0449", reason = "unsafe-libyaml is unmaintained with no patched release; used by serde_yaml and VRL's serde_yaml_ng, whose backend migration is pending upstream (https://github.com/acatton/serde-yaml-ng/issues/5)" }, { id = "RUSTSEC-2025-0134", reason = "rustls-pemfile is unmaintained - unpatched crate (https://github.com/bytebeamio/rumqtt/issues/1010) & tonic/reqwest upgrade (https://github.com/vectordotdev/vector/issues/19179)" }, { id = "RUSTSEC-2026-0049", reason = "rustls-webpki 0.102 is vulnerable - tonic upgrade (https://github.com/vectordotdev/vector/issues/19179)" }, { id = "RUSTSEC-2026-0098", reason = "rustls-webpki 0.102 is vulnerable - tonic upgrade (https://github.com/vectordotdev/vector/issues/19179)" },