# quick-xml is pulled in only through wayland-scanner's build-time Wayland XML # code generation path: # # wayland-scanner v0.31.10 -> quick-xml v0.39.x # # The current wayland-scanner release requires quick-xml ^0.39, so it cannot # accept the fixed quick-xml >=0.41.0 line yet. This project does not parse # attacker-controlled XML at runtime through quick-xml. Remove these ignores as # soon as wayland-scanner or the wayland-* crates release a compatible fix. [advisories] ignore = [ "RUSTSEC-2026-0194", "RUSTSEC-2026-0195", ]