mastodon/.bundler-audit.yml

mirror of https://github.com/mastodon/mastodon synced 2024-11-24 07:06:18 +09:00
---
ignore:
  # devise-two-factor advisory about brute-forcing TOTP
  # We have rate-limits on authentication endpoints in place (including second
  # factor verification) since Mastodon v3.2.0
  - CVE-2024-0227
Ignore the devise-two-factor advisory as we have rate limits in place (#28733) 2024-01-15 19:45:48 +09:00			`---`
			`ignore:`
			`# devise-two-factor advisory about brute-forcing TOTP`
			`# We have rate-limits on authentication endpoints in place (including second`
			`# factor verification) since Mastodon v3.2.0`
			`- CVE-2024-0227`