Suricata

Rand 0.8.5 triggers this cargo audit notice:

Crate:     rand
Version:   0.8.5
Warning:   unsound
Title:     Rand is unsound with a custom logger using `rand::rng()`
Date:      2026-04-09
ID:        RUSTSEC-2026-0097
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0097
Dependency tree:
rand 0.8.5
└── phf_generator 0.10.0
    └── phf_codegen 0.10.0
        └── tls-parser 0.11.0
            └── suricata 9.0.0-dev

Reference: https://rustsec.org/advisories/RUSTSEC-2026-0097

Updating to rand 0.10.0 requires an MSRV of 1.85; however, we can safely suppress this report as the "log" feature is not enabled in our dependency chain.