NethermindEth / NethermindEth/pluto
Remove RUSTSEC-2026-0118 and RUSTSEC-2026-0119
Open
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 8
- Forks
- 5
- Avg merge
- 4d 16h
- Merged PRs (30d)
- 37
Description
Description
libp2p-mdns v0.48.0 requires hickory-proto = "^0.25.2"
libp2p-dns 0.44.0 also pins hickory-resolver 0.25.2, which pulls hickory-proto 0.25.2.
Acceptance criteria
Remove this on deny.toml when libp2p update the version
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with deny.toml and the listed libp2p-mdns and libp2p-dns dependency versions. Check the libp2p update that changes the hickory versions, then remove RUSTSEC-2026-0118 and RUSTSEC-2026-0119 from deny.toml. Done means the updated dependency set no longer requires those advisories and the deny configuration no longer contains them.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- build-system, security
- Issue type
- Refactor
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100