[Backport release-26.05] radicle-node: mark insecure (#566484)

This commit is contained in:
Felix Bargfeldt
2026-09-24 11:13:55 +00:00
committed by GitHub

View File

@@ -173,5 +173,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
platforms = lib.platforms.unix;
teams = [ lib.teams.radicle ];
mainProgram = "rad";
knownVulnerabilities = [
# https://radicle.dev/2026/09/23/disclosure-of-vulnerability-in-network-protocol
"Private repositories are insecure: traffic between nodes is not encrypted and not authenticated."
];
};
})