tacd: downgrade async-tungstenite as it requires rust >=1.70

… and we still need 1.68 for mickeldore compatibility.

This means we have to live with another advisory in our deny list:

  The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause
  a denial of service (minutes of CPU consumption) via an excessive length of an
  HTTP header in a client handshake. The length affects both how many times a parse
  is attempted (e.g., thousands of times) and the average amount of data for each
  parse attempt (e.g., millions of bytes).

Signed-off-by: Leonard Göhrs <[email protected]>

Author: hnez

Cargo.lock

@@ -16,7 +16,7 @@ anyhow = "1.0"
 async-sse = "5.1"
 async-std = { version = "1.12", features = ["attributes"] }
 async-trait = "0.1"
-async-tungstenite = "0.23"
+async-tungstenite = "0.22"
 base64 = "0.21"
 chrono = "0.4"
 embedded-graphics = "0.7"

Cargo.toml

@@ -16,6 +16,7 @@ ignore = [
    "RUSTSEC-2021-0059",
    "RUSTSEC-2021-0060",
    "RUSTSEC-2021-0064",
+   "RUSTSEC-2023-0065",
 ]
 
 [bans]