Commit bb49d04
authored
chore: bump quinn-proto to 0.11.15 for RUSTSEC-2026-0185 (#78)
quinn-proto < 0.11.15 is flagged by RUSTSEC-2026-0185 (remote memory
exhaustion via unbounded out-of-order stream reassembly). It is pinned in
the lockfile only as reqwest's optional http3 dependency and is never
compiled. Bump the pin to the patched 0.11.15; semver-compatible, no
build impact.
Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>1 parent 702ab16 commit bb49d04
1 file changed
Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments