Skip to content

UID2-8026, UID2-8027, UID2-8028: suppress 3 CVEs in .trivyignore - #1077

Merged
swibi-ttd merged 2 commits into
mainfrom
swi-UID2-8027-8028-suppress-cves
Oct 6, 2026
Merged

swibi-ttd merged 2 commits into
mainfrom
swi-UID2-8027-8028-suppress-cves

Conversation

@swibi-ttd

@swibi-ttd swibi-ttd commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Suppresses CVE-2026-93687, CVE-2026-93748 and CVE-2026-85393 in .trivyignore until 2027-01-06 (3 months).

  • CVE-2026-93687 (HIGH, braces): Required attack preconditions are absent in this configuration.
  • CVE-2026-93748 (HIGH, http-cache-semantics): Required attack preconditions are absent in this configuration.
  • CVE-2026-85393 (HIGH, node-forge): Vulnerable code path is not reachable in this configuration.

The assessment is recorded on the ticket in the title.

🤖 Generated with Claude Code

swibi-ttd and others added 2 commits October 6, 2026 14:46
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@swibi-ttd swibi-ttd changed the title UID2-8027, UID2-8028: suppress 2 CVEs in .trivyignore UID2-8026, UID2-8027, UID2-8028: suppress 3 CVEs in .trivyignore Oct 6, 2026
@swibi-ttd
swibi-ttd merged commit 81182cc into main Oct 6, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants