mastodon/.bundler-audit.yml

mirror of https://github.com/mastodon/mastodon.git synced 2024-12-29 18:09:37 +01:00
---
ignore:
  # devise-two-factor advisory about brute-forcing TOTP
  # We have rate-limits on authentication endpoints in place (including second
  # factor verification) since Mastodon v3.2.0
  - CVE-2024-0227
Ignore the devise-two-factor advisory as we have rate limits in place (#28733) 2024-01-15 11:45:48 +01:00			`---`
			`ignore:`
			`# devise-two-factor advisory about brute-forcing TOTP`
			`# We have rate-limits on authentication endpoints in place (including second`
			`# factor verification) since Mastodon v3.2.0`
			`- CVE-2024-0227`