mirror of
https://github.com/openai/codex.git
synced 2026-11-08 20:40:33 +00:00
Add `RUSTSEC-2026-0387` to the `cargo audit` and `cargo deny` ignore lists for `crypto-bigint` 0.5.5, pulled in through `elliptic-curve` 0.13.8. Document the affected dependency paths and the potential timing leakage during private-key or session-secret operations. Remove the exceptions when those paths use `crypto-bigint` 0.7.6 or later. GitOrigin-RevId: 7ff42c9b127900ddf772bf1cc88947f6e7dfcd10