1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
[]
= []
[]
= "~/.cargo/advisory-db"
= ["https://github.com/rustsec/advisory-db"]
= [
# rsa Marvin timing side-channel (RUSTSEC-2023-0071) surfaces via
# sqlx-mysql which is a transitive dep of sqlx. socle only enables
# the postgres feature so the mysql (and rsa) code paths are never compiled
# or linked. No actionable fix until sqlx drops the mysql dep or patches rsa.
"RUSTSEC-2023-0071",
# rand unsound aliased-mut-ref (RUSTSEC-2026-0097) pulled in transitively
# by sqlx-postgres 0.8.x. Fix requires rand >= 0.9.3 which sqlx 0.8.x has
# not yet released. Conditions for UB are extremely narrow (custom logger +
# trace logging + ThreadRng reseeding). Review when sqlx 0.8.x ships fix.
# review-by: 2026-07-20
"RUSTSEC-2026-0097",
]
[]
= [
"MIT",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Unicode-3.0",
"Unicode-DFS-2016",
"OpenSSL",
"Zlib",
"CC0-1.0",
]
= []
[]
= "warn"
= "allow"
= []
[]
= "deny"
= "deny"
= [
"https://github.com/rust-lang/crates.io-index",
]
= []