# OSV exceptions consumed by OpenSSF Scorecard's Vulnerabilities check.
# Keep this file next to Cargo.lock; OSV config does not propagate directories.
[[]]
= "RUSTSEC-2025-0119"
= 2026-10-01
= "number_prefix is an unmaintained transitive dependency from fastembed -> hf-hub -> indicatif; no reachable patched version yet. Review quarterly or remove when upstream drops it."
[[]]
= "RUSTSEC-2024-0436"
= 2026-10-01
= "paste is an unmaintained transitive proc-macro from tokenizers/fastembed/image; no reachable patched version yet. Review quarterly or remove when upstream drops it."