Files
codex/codex-rs/.cargo
Eric Traut e1c87d1c2d Ignore the crypto-bigint timing advisory in dependency checks (#57206)
Add `RUSTSEC-2026-0387` to the `cargo audit` and `cargo deny` ignore lists for `crypto-bigint` 0.5.5, pulled in through `elliptic-curve` 0.13.8.

Document the affected dependency paths and the potential timing leakage during private-key or session-secret operations. Remove the exceptions when those paths use `crypto-bigint` 0.7.6 or later.

GitOrigin-RevId: 7ff42c9b127900ddf772bf1cc88947f6e7dfcd10
2026-10-26 19:28:25 +00:00
..