Ignore inappplicable CVE

This commit is contained in:
Kovid Goyal 2026-06-06 06:12:03 +05:30
parent 522555a5b6
commit 2d9e243847
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C

View file

@ -233,6 +233,7 @@ def install_grype(exe: str = '/tmp/grype') -> str:
'CVE-2026-4519',
'CVE-2026-1502',
'CVE-2026-7210', # DoS in unused XML parser
'CVE-2026-3276', # DoS in unicodedata.normalize()
# github.com/nwaples/rardecode/v2
'CVE-2025-11579', # rardecode is version 2.2.1, not vulnerable
'CVE-2026-2673', # openssl fix not released