From b67fccd8ead837649ff0e29e2ab886ccd16a4dd1 Mon Sep 17 00:00:00 2001
From: sean wibisono <sean.wibisono@thetradedesk.com>
Date: Wed, 7 Oct 2026 13:58:07 +1100
Subject: [PATCH] UID2-8049: suppress CVE-2026-90711 in .trivyignore (not
 affected)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 .trivyignore | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.trivyignore b/.trivyignore
index 9549ea1..4dea940 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -10,3 +10,8 @@ CVE-2026-93990 exp:2026-12-25
 # configuration.
 # See: UID2-8033
 CVE-2026-103111 exp:2027-01-06
+
+# CVE-2026-90711 — proxy-addr (CRITICAL). Required attack preconditions are absent in this
+# configuration. Vulnerable code path is not reachable in this configuration.
+# See: UID2-8049
+CVE-2026-90711 exp:2027-01-07