SWREI/instrumental
0
0
Fork 0
Code Issues Activity

Ignore the devise-two-factor advisory as we have rate limits in place (#28733)

Browse Source
This commit is contained in:
Claire 2024-01-15 11:45:48 +01:00 committed by GitHub
parent 58830be943
commit e81c5c0a51
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.bundler-audit.yml Normal file
View File

@ -0,0 +1,6 @@
---
ignore:
# devise-two-factor advisory about brute-forcing TOTP
# We have rate-limits on authentication endpoints in place (including second
# factor verification) since Mastodon v3.2.0
- CVE-2024-0227