cargo-deny advisories require manual attention
Author: github-actions[bot]Created Aug 11, 2026Updated Sep 14, 2026
The cargo-deny-autofix workflow could not fix the following advisories with a semver-compatible lockfile bump. They need a manual dependency upgrade or a deny.toml ignore entry:
- RUSTSEC-2023-0126:
im15.1.0 in.(no semver-compatible fix; needs a manual bump or adeny.tomlignore) - RUSTSEC-2026-0247:
bitmaps2.1.0 in.(no semver-compatible fix; needs a manual bump or adeny.tomlignore) - RUSTSEC-2026-0248:
im15.1.0 in.(no semver-compatible fix; needs a manual bump or adeny.tomlignore) - RUSTSEC-2026-0251:
sized-chunks0.6.5 in.(no semver-compatible fix; needs a manual bump or adeny.tomlignore) - RUSTSEC-2023-0126:
im15.1.0 inexternal-crates/move(no semver-compatible fix; needs a manual bump or adeny.tomlignore) - RUSTSEC-2026-0247:
bitmaps2.1.0 inexternal-crates/move(no semver-compatible fix; needs a manual bump or adeny.tomlignore) - RUSTSEC-2026-0248:
im15.1.0 inexternal-crates/move(no semver-compatible fix; needs a manual bump or adeny.tomlignore) - RUSTSEC-2026-0251:
sized-chunks0.6.5 inexternal-crates/move(no semver-compatible fix; needs a manual bump or adeny.tomlignore)
Workflow run: https://github.com/MystenLabs/sui/actions/runs/31464976512
Source: MystenLabs/sui