Skip to content

Commit 1d7c5b1

Browse files
committed
1 parent d88b019 commit 1d7c5b1

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

.trivyignore

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,3 +48,16 @@ CVE-2026-1229
4848
# libexpat: XML_ExternalEntityParserCreate does not copy encoding handler user data.
4949
# No external XML entity processing path exists in this product.
5050
CVE-2026-24515
51+
52+
# QuickJS stack overflow via deeply nested JS input.
53+
# Only internal tool scripts (convert-rule.mjs, report.mjs) are executed;
54+
# no untrusted JavaScript is evaluated.
55+
CVE-2023-31922
56+
57+
# zlib: buffer overflow in standalone untgz demo utility.
58+
# The core zlib library (libz) is unaffected; untgz is not used in this image.
59+
CVE-2026-22184
60+
61+
# Go stdlib net/url: incorrect parsing of IPv6 host literals.
62+
# CNI plugins do not parse user-supplied URLs.
63+
CVE-2026-25679

0 commit comments

Comments
 (0)