From 0afe77ebc933662d1ddab6023599b68ec6c9585b Mon Sep 17 00:00:00 2001 From: Kovid Goyal Date: Thu, 5 Feb 2026 23:01:58 +0530 Subject: [PATCH] Ignore irrelevant CVE --- .github/workflows/ci.py | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci.py b/.github/workflows/ci.py index b861f8bba..d36da09ea 100644 --- a/.github/workflows/ci.py +++ b/.github/workflows/ci.py @@ -213,6 +213,7 @@ def install_grype(exe: str = '/tmp/grype') -> str: 'CVE-2025-13836', # DoS in http client reading from malicious server 'CVE-2025-12084', # DoS in xml.dom.minidom unused in kitty 'CVE-2025-13837', # DoS in plistlib reading plist. We only use plistlib for writing + 'CVE-2025-6075', # Quadratic complexity in os.path.expandvars() # python stdlib all these are erroneously marked as fixed in python 3.15 # when it hasnt even been released. Sigh. 'CVE-2026-1299',